SSA-208356 V1.0: DFT File Parsing Vulnerabilities in Solid Edge

Risk Summary

<p>Siemens has released a new version for Solid Edge to fix two vulnerabilities that could be triggered when the application read files in DFT file format. If a user is tricked to opening of a malicious file with the affected products, this could lead to application crash, or potentially arbitrary code execution on the target host system.</p> <p>Siemens recommends to update to the latest versions and to limit opening of untrusted files from unknown sources in the affected products.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)