Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-24581

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affect

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19425)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens Solid Edge SE2022

Default version status: unknown

  • All versions < V222.0MP12affected

Siemens Solid Edge SE2022

Default version status: unknown

  • All versionsaffected

Siemens Solid Edge SE2023

Default version status: unknown

  • All versions < V223.0Update2affected

References