SSA-589891 V1.0: Multiple PAR File Parsing Vulnerabilities in Solid Edge

Risk Summary

<p>Siemens Solid Edge 2023 has released Update 10, that fixes multiple vulnerabilities that could be triggered when the application reads PAR files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system.</p> <p>Siemens has released a new version for Solid Edge SE2023 and recommends to update to the latest version.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)