Heap-Based Buffer Overflow Vulnerability in Solid Edge SE2023 by Siemens

CVE-2023-49123

What is CVE-2023-49123?

A significant vulnerability has been identified in Solid Edge SE2023, affecting all versions prior to V223.0 Update 10. The vulnerability arises from a heap-based buffer overflow that occurs when the application processes specially crafted PAR files. If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code within the context of the affected process, posing substantial security risks. Vigilant users and administrators of Solid Edge SE2023 should apply the necessary updates to mitigate potential threats.

References