ZDI-CAN-19104: ZDI-23-204: Siemens Solid Edge Viewer DXF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published Mar 1, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Siemens Solid Edge Viewer
Event History
Mar 1, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19104?
The severity of ZDI-CAN-19104 is high due to its potential for remote code execution.
2
How do I fix ZDI-CAN-19104?
To fix ZDI-CAN-19104, update Siemens Solid Edge Viewer to the latest version provided by Siemens.
3
What type of attack does ZDI-CAN-19104 facilitate?
ZDI-CAN-19104 facilitates remote code execution attacks requiring user interaction.
4
What is required to exploit ZDI-CAN-19104?
To exploit ZDI-CAN-19104, the target must visit a malicious page or open a malicious file.
5
Which software is affected by ZDI-CAN-19104?
ZDI-CAN-19104 affects installations of Siemens Solid Edge Viewer.