CVE-2023-24552: High severity Siemens Solid Edge Se2023 vulnerability
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Solid Edge SE2022to a version that resolves this vulnerability.Fixed in V222.0MP12 - Upgrade
Upgrade
Solid Edge SE2023to a version that resolves this vulnerability.Fixed in V223.0Update2
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-24552.
What is the severity of CVE-2023-24552?
The severity of CVE-2023-24552 is high.
Which software versions are affected by CVE-2023-24552?
All versions of Solid Edge SE2023 up to V223.0Update2 are affected by CVE-2023-24552.
How does CVE-2023-24552 exploit the system?
CVE-2023-24552 exploits the system by causing an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file.
Is there a fix available for CVE-2023-24552?
Yes, Siemens has released a fix for CVE-2023-24552. Please refer to the provided reference link for more information.