ZDI-23-208: Siemens Solid Edge Viewer DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Published Mar 1, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Siemens Solid Edge Viewer
Event History
Mar 1, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-208?
The severity of ZDI-23-208 is high as it allows remote code execution on affected systems.
2
How do I fix ZDI-23-208?
To fix ZDI-23-208, update Siemens Solid Edge Viewer to the latest version provided by the vendor.
3
What type of attacks are possible with ZDI-23-208?
ZDI-23-208 allows attackers to execute arbitrary code, which can lead to full system compromise.
4
Is user interaction required for ZDI-23-208 exploitation?
Yes, user interaction is required for ZDI-23-208 exploitation, as targets must visit a malicious page or open a malicious file.
5
Who is affected by ZDI-23-208?
Users of Siemens Solid Edge Viewer are affected by ZDI-23-208 vulnerability.