ZDI-23-211: Siemens Solid Edge Viewer DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Published Mar 1, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Siemens Solid Edge Viewer
Event History
Mar 1, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-211?
The severity of ZDI-23-211 is considered high due to the potential for remote code execution.
2
How do I fix ZDI-23-211?
To fix ZDI-23-211, users should update Siemens Solid Edge Viewer to the latest version that addresses this vulnerability.
3
Who is affected by ZDI-23-211?
Users of Siemens Solid Edge Viewer are affected by ZDI-23-211.
4
What kind of attacks can ZDI-23-211 facilitate?
ZDI-23-211 can facilitate remote code execution attacks, requiring user interaction to exploit.
5
What must a user do to be vulnerable to ZDI-23-211?
A user must visit a malicious page or open a malicious file for ZDI-23-211 to be exploited.