CVE-2023-39187

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 8, 2023
Updated: Aug 10, 2023
CWE ID 125

Summary

CVE-2023-39187 is a vulnerability found in Solid Edge SE2023 (All versions < V223.0 Update 7). It occurs due to an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This vulnerability could potentially allow an attacker to execute code within the current process. The affected products include Solid Edge SE2023 and several other related products. The base severity of this vulnerability is rated as HIGH with a base score of 7.8, and it requires user interaction for exploitation. It has a high impact on both integrity and confidentiality, with a CVSS vector string of CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. It is recommended to update affected versions to V223.0 Update 7 or later to remediate this vulnerability and minimize the potential danger it poses to organizations using these software products.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-39187 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options