Stack-Based Buffer Vulnerability in Solid Edge Products by Siemens

CVE-2023-24566

What is CVE-2023-24566?

A stack-based buffer overflow vulnerability has been identified in Solid Edge versions prior to V222.0MP12 and V223.0Update2. This weakness arises from the application's inability to properly parse specially crafted PAR files, resulting in the possibility for an attacker to execute arbitrary code within the context of the affected process. Organizations using these versions of Solid Edge should implement immediate patches and review their security measures to mitigate potential exploitation.

References