ZDI-CAN-19080: ZDI-23-210: Siemens Solid Edge Viewer DWG File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19080?
The severity of ZDI-CAN-19080 is critical due to its ability to allow remote code execution.
How do I fix ZDI-CAN-19080?
To fix ZDI-CAN-19080, users should update their Siemens Solid Edge Viewer software to the latest version provided by Siemens.
What are the prerequisites for exploiting ZDI-CAN-19080?
Exploitation of ZDI-CAN-19080 requires user interaction, such as visiting a malicious page or opening a malicious file.
Which software is affected by ZDI-CAN-19080?
ZDI-CAN-19080 specifically affects installations of Siemens Solid Edge Viewer.
What are the potential impacts of ZDI-CAN-19080?
The potential impacts of ZDI-CAN-19080 include remote code execution, which can lead to system compromise and data theft.