Yüksek CVSS 7.8
CVE-2023-24552: Solid Edge Se2022: sınır dışı okuma
Açıklama (NVD)
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.
Özet bilgiler
- Ürün
- Siemens Solid Edge Se2022
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,22 (yüzdelik 12)
- CWE
- CWE-125
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| siemens-solid-edge-se2022 | — | — | — |
| siemens-solid-edge-se2022 | maintenance_pack_1 | maintenance_pack_1 | — |
| siemens-solid-edge-se2022 | maintenance_pack_2 | maintenance_pack_2 | — |
| siemens-solid-edge-se2022 | maintenance_pack_3 | maintenance_pack_3 | — |
| siemens-solid-edge-se2022 | maintenance_pack_4 | maintenance_pack_4 | — |
| siemens-solid-edge-se2022 | maintenance_pack_5 | maintenance_pack_5 | — |
| siemens-solid-edge-se2022 | maintenance_pack_7 | maintenance_pack_7 | — |
| siemens-solid-edge-se2022 | maintenance_pack_8 | maintenance_pack_8 | — |
| siemens-solid-edge-se2022 | maintenance_pack_9 | maintenance_pack_9 | — |
| siemens-solid-edge-se2022 | maintenance_pack_10 | maintenance_pack_10 | — |
| siemens-solid-edge-se2022 | maintenance_pack_11 | maintenance_pack_11 | — |
| siemens-solid-edge-se2023 | — | — | 2210.0002.004 |