CVE-2023-24552: High severity siemens solid edge vulnerability
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-24552.
What is the severity of CVE-2023-24552?
The severity of CVE-2023-24552 is high.
Which software versions are affected by CVE-2023-24552?
All versions of Solid Edge SE2023 up to V223.0Update2 are affected by CVE-2023-24552.
How does CVE-2023-24552 exploit the system?
CVE-2023-24552 exploits the system by causing an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file.
Is there a fix available for CVE-2023-24552?
Yes, Siemens has released a fix for CVE-2023-24552. Please refer to the provided reference link for more information.