CVE-2023-49132

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 9, 2024
Updated: Jan 10, 2024
CWE ID 824

Summary

CVE-2023-49132 is a newly discovered vulnerability that affects Solid Edge SE2023, with all versions prior to V223.0 Update 10 being vulnerable. This issue stems from uninitialized pointer access during the parsing of specially crafted PAR files. An attacker can exploit this vulnerability by manipulating these PAR files, potentially gaining the ability to execute code in the context of the current process. This poses a significant security risk and requires immediate attention from users and administrators to apply the necessary updates.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Siemens Solid Edge Se2023

Affected Vendors

  • Siemens AG