ZDI-23-210: Siemens Solid Edge Viewer DWG File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-210?
The severity of ZDI-23-210 is high, as it allows remote code execution due to improper handling of malicious files or web pages.
How do I fix ZDI-23-210?
To fix ZDI-23-210, update Siemens Solid Edge Viewer to the latest version provided by Siemens.
Who is affected by ZDI-23-210?
Users of Siemens Solid Edge Viewer are affected by ZDI-23-210 if they interact with malicious content.
Is user interaction required for ZDI-23-210?
Yes, user interaction is required for ZDI-23-210, as the target must visit a malicious page or open a malicious file.
What type of vulnerability is ZDI-23-210?
ZDI-23-210 is a remote code execution vulnerability that affects the integrity of Siemens Solid Edge Viewer.