ZDI-CAN-19423: ZDI-23-202: Siemens Solid Edge Viewer SLDPRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Mar 1, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected Software

1 affected component

Siemens Solid Edge Viewer

Event History

Mar 1, 2023

Advisory Published

06:00 AM

Data Sourced

06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-19423?

The ZDI-CAN-19423 vulnerability has a high severity rating due to its potential for arbitrary code execution.

How do I fix ZDI-CAN-19423?

To fix ZDI-CAN-19423, update Siemens Solid Edge Viewer to the latest version provided by Siemens.

Who is affected by ZDI-CAN-19423?

Users of Siemens Solid Edge Viewer are affected by the ZDI-CAN-19423 vulnerability.

What kind of attack is possible with ZDI-CAN-19423?

ZDI-CAN-19423 allows remote attackers to execute arbitrary code upon user interaction with a malicious page or file.

What versions of Siemens software are impacted by ZDI-CAN-19423?

All installations of Siemens Solid Edge Viewer are potentially affected by ZDI-CAN-19423.