CVE-2023-49132: High severity siemens solid edge vulnerability

Q: What is the severity of CVE-2023-49132?

CVE-2023-49132 has been rated with a high severity due to the potential for remote code execution.

Q: How do I fix CVE-2023-49132?

To fix CVE-2023-49132, update Solid Edge SE2023 to version 223.0 Update 10 or later.

Q: Which versions of Solid Edge SE2023 are affected by CVE-2023-49132?

All versions of Solid Edge SE2023 prior to version 223.0 Update 10 are affected by CVE-2023-49132.

Q: Can CVE-2023-49132 be exploited remotely?

Yes, CVE-2023-49132 can potentially be exploited remotely if an attacker provides specially crafted PAR files.

Q: What types of attacks can CVE-2023-49132 enable?

CVE-2023-49132 can enable attackers to execute arbitrary code in the context of the current user session.

Published Jan 9, 2024

Updated

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

Affected Software

11 affected components

Siemens Solid Edge Se2023<223.0

Siemens Solid Edge Se2023=223.0

Siemens Solid Edge Se2023=223.0-update_0001

Siemens Solid Edge Se2023=223.0-update_0002

Siemens Solid Edge Se2023=223.0-update_0003

Siemens Solid Edge Se2023=223.0-update_0004

Siemens Solid Edge Se2023=223.0-update_0005

Siemens Solid Edge Se2023=223.0-update_0006

Siemens Solid Edge Se2023=223.0-update_0007

Siemens Solid Edge Se2023=223.0-update_0008

Siemens Solid Edge Se2023=223.0-update_0009

Event History

Jan 9, 2024

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-49132?

CVE-2023-49132 has been rated with a high severity due to the potential for remote code execution.

How do I fix CVE-2023-49132?

To fix CVE-2023-49132, update Solid Edge SE2023 to version 223.0 Update 10 or later.

Which versions of Solid Edge SE2023 are affected by CVE-2023-49132?

All versions of Solid Edge SE2023 prior to version 223.0 Update 10 are affected by CVE-2023-49132.

Can CVE-2023-49132 be exploited remotely?

Yes, CVE-2023-49132 can potentially be exploited remotely if an attacker provides specially crafted PAR files.

What types of attacks can CVE-2023-49132 enable?