ZDI-CAN-19426: ZDI-23-1024: Siemens Solid Edge Viewer OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19426?
The severity of ZDI-CAN-19426 is considered high due to its potential for remote information disclosure.
How do I fix ZDI-CAN-19426?
To fix ZDI-CAN-19426, ensure that you update to the latest version of Siemens Solid Edge Viewer as recommended by the vendor.
What types of data can be disclosed through ZDI-CAN-19426?
ZDI-CAN-19426 can potentially disclose sensitive information stored in the affected system.
Is user interaction required to exploit ZDI-CAN-19426?
Yes, user interaction is required, as the target must visit a malicious page or open a malicious file.
What products are affected by ZDI-CAN-19426?
Siemens Solid Edge Viewer is the product affected by the ZDI-CAN-19426 vulnerability.