SSA-589891 V1.0: Multiple PAR File Parsing Vulnerabilities in Solid Edge

Siemens Solid Edge 2023 has released Update 10, that fixes multiple vulnerabilities that could be triggered when the application reads PAR files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system.

Siemens has released a new version for Solid Edge SE2023 and recommends to update to the latest version.

application arbitrary code arbitrary code execution code code execution crash edge file files fixes malicious parsing siemens solid solid edge ssa update vulnerabilities