ZDI-CAN-19074: ZDI-23-208: Siemens Solid Edge Viewer DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Mar 1, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected Software

1 affected component

Siemens Solid Edge Viewer

Event History

Mar 1, 2023

Advisory Published

06:00 AM

Data Sourced

06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-19074?

ZDI-CAN-19074 is considered a high-severity vulnerability due to its potential for remote code execution.

How do I fix ZDI-CAN-19074?

To fix ZDI-CAN-19074, ensure that you have the latest updates and patches installed for Siemens Solid Edge Viewer.

Who is affected by ZDI-CAN-19074?

Users of Siemens Solid Edge Viewer are affected by the ZDI-CAN-19074 vulnerability.

What type of attack can be executed with ZDI-CAN-19074?

ZDI-CAN-19074 allows remote attackers to execute arbitrary code on affected installations.

Is user interaction required to exploit ZDI-CAN-19074?

Yes, user interaction is required to exploit ZDI-CAN-19074 by visiting a malicious page or opening a malicious file.