SSA-382651 V1.0: File Parsing Vulnerability in Solid Edge before V223.0.11

Solid Edge is affected by an out of bounds read vulnerability that could be triggered when the application reads files that contains XT parts. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process.

Siemens has released a new version for Solid Edge and recommends to update to the latest version.

application applications attacker code code execution edge file files malicious parsing parts remote code remote code execution solid solid edge ssa vulnerability