ZDI-CAN-19432: ZDI-23-907: Siemens Solid Edge Viewer DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Published Jul 10, 2023

Updated

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected Software

1 affected component

Siemens Solid Edge Viewer

Event History

Jul 10, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-19432?

ZDI-CAN-19432 is classified as a medium severity vulnerability that can lead to sensitive information disclosure.

Who is affected by ZDI-CAN-19432?

The vulnerability ZDI-CAN-19432 affects installations of Siemens Solid Edge Viewer.

How do I fix ZDI-CAN-19432?

To fix ZDI-CAN-19432, users should update to the latest version of Siemens Solid Edge Viewer as provided by the vendor.

What type of attack does ZDI-CAN-19432 involve?

ZDI-CAN-19432 can be exploited by remote attackers, requiring user interaction via a malicious webpage or file.

What information can be disclosed through ZDI-CAN-19432?

Through ZDI-CAN-19432, remote attackers may disclose sensitive information from affected installations.