ZDI-CAN-19072: ZDI-23-206: Siemens Solid Edge Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Mar 1, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected Software

1 affected component

Siemens Solid Edge Viewer

Event History

Mar 1, 2023

Advisory Published

06:00 AM

Data Sourced

06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-19072?

The severity of ZDI-CAN-19072 is categorized as high due to its potential for arbitrary code execution.

How do I fix ZDI-CAN-19072?

To fix ZDI-CAN-19072, update Siemens Solid Edge Viewer to the latest version that addresses this vulnerability.

What types of attacks can be executed through ZDI-CAN-19072?

ZDI-CAN-19072 allows remote attackers to execute arbitrary code, which can lead to a full system compromise.

Is user interaction required to exploit ZDI-CAN-19072?

Yes, user interaction is required to exploit ZDI-CAN-19072 by visiting a malicious page or opening a malicious file.

What products are affected by ZDI-CAN-19072?

ZDI-CAN-19072 affects all installations of Siemens Solid Edge Viewer.