CVE-2023-49130

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
siemensCNA
7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
VendorProductVersion
siemenssolid_edge_se2023
𝑥
< 223.0
siemenssolid_edge_se2023
223.0
siemenssolid_edge_se2023
223.0:update_0001
siemenssolid_edge_se2023
223.0:update_0002
siemenssolid_edge_se2023
223.0:update_0003
siemenssolid_edge_se2023
223.0:update_0004
siemenssolid_edge_se2023
223.0:update_0005
siemenssolid_edge_se2023
223.0:update_0006
siemenssolid_edge_se2023
223.0:update_0007
siemenssolid_edge_se2023
223.0:update_0008
siemenssolid_edge_se2023
223.0:update_0009
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cert-portal.siemens.com/productcert/pdf/ssa-589891.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-589891.pdf