Parasolid Vulnerability Could Allow Execution of Code

CVE-2023-49125

Summary

A vulnerability exists in multiple versions of Siemens' Parasolid and Solid Edge products, characterized by an out of bounds read past the end of an allocated structure. This issue arises during the parsing of specially crafted XT format files, which may allow an attacker to execute arbitrary code within the context of the current process. It is essential for organizations using these applications to review the affected versions and apply the necessary updates to mitigate potential exploitation.

References