CVE Catalog

CVE-2023-24561

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.22%

12th percentile - higher than 12% of all known CVEs

Summary

A vulnerability in Solid Edge SE2022 (versions < V222.0MP12) and SE2023 (versions < V223.0Update2) involves uninitialized pointer access while parsing specially crafted PAR files. An attacker could exploit this to execute code in the context of the current process.

Risk Assessment

This could allow an attacker to execute arbitrary code, posing a serious risk to confidentiality, integrity, and availability.

Recommendation

Update Solid Edge to version V222.0MP12 or later for SE2022 and V223.0Update2 or later for SE2023.

Other vulnerabilities in Solid Edge

See all
Original NVD description (English source)

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS