CVE-2023-49125: High severity parasolid vulnerability

Q: What is the severity of CVE-2023-49125?

CVE-2023-49125 is classified as a critical vulnerability affecting multiple Siemens software products.

Q: How do I fix CVE-2023-49125?

To fix CVE-2023-49125, upgrade affected Siemens software to the recommended versions or patches provided by Siemens.

Q: Which Siemens products are affected by CVE-2023-49125?

CVE-2023-49125 affects specific versions of Parasolid and Solid Edge SE2023 and SE2024.

Q: Is there a workaround for CVE-2023-49125?

Currently, there are no known workarounds for CVE-2023-49125; upgrading to the latest versions is advised.

Q: What is the impact of CVE-2023-49125?

CVE-2023-49125 could potentially lead to unauthorized access or manipulation of data within the affected Siemens software.

Published Feb 13, 2024

Updated

A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.263), Parasolid V35.1 (All versions < V35.1.252), Parasolid V36.0 (All versions < V36.0.198), Solid Edge SE2023 (All versions < V223.0 Update 11), Solid Edge SE2024 (All versions < V224.0 Update 3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted files containing XT format. This could allow an attacker to execute code in the context of the current process.

Affected Software

17 affected components

Siemens Parasolid>=35.0<35.0.263

Siemens Parasolid>=35.1<35.1.252

Siemens Parasolid>=36.0<36.0.198

Siemens Solid Edge Se2023<223.0

Siemens Solid Edge Se2023=223.0-update_0001

Siemens Solid Edge Se2023=223.0-update_0002

Siemens Solid Edge Se2023=223.0-update_0003

Siemens Solid Edge Se2023=223.0-update_0004

Siemens Solid Edge Se2023=223.0-update_0005

Siemens Solid Edge Se2023=223.0-update_0006

Siemens Solid Edge Se2023=223.0-update_0007

Siemens Solid Edge Se2023=223.0-update_0008

Siemens Solid Edge Se2023=223.0-update_0009

Siemens Solid Edge Se2023=223.0-update_0010

Siemens Solid Edge Se2024<224.0

Siemens Solid Edge Se2024=224.0-update_0001

Siemens Solid Edge Se2024=224.0-update_0002

Event History

Feb 13, 2024

CVE Published

via MITRE·08:59 AM

Data Sourced

via MITRE·08:59 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-49125?

CVE-2023-49125 is classified as a critical vulnerability affecting multiple Siemens software products.

How do I fix CVE-2023-49125?

To fix CVE-2023-49125, upgrade affected Siemens software to the recommended versions or patches provided by Siemens.

Which Siemens products are affected by CVE-2023-49125?

CVE-2023-49125 affects specific versions of Parasolid and Solid Edge SE2023 and SE2024.

Is there a workaround for CVE-2023-49125?

Currently, there are no known workarounds for CVE-2023-49125; upgrading to the latest versions is advised.

What is the impact of CVE-2023-49125?