SSA-932528 V1.0: Multiple File Parsing Vulnerabilities in Solid Edge

Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as IFC, OBJ or STP format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to crash the application or execute arbitrary code.

Siemens has released several updates for Solid Edge SE2023 and recommends to update to the latest version.

application attacker corruption edge file files malicious memory memory corruption parsing solid solid edge ssa vulnerabilities vulnerability