A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · siemensNVD modified 2026-10-23 23:10
Affected (CPE criteria) 12
cpe:2.3:a:siemens:solid_edge_se2022:-:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_1:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_2:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_3:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_4:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_5:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_7:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_8:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_9:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_10:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_11:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*
References 2
- https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf Vendor Advisory