Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveSiemensCVE-2023-25140
HistoryFeb 14, 2023 - 11:15 a.m.

CVE-2023-25140

2023-02-1411:15:17
CWE-125
siemens
web.nvd.nist.gov
28
cve-2023-25140
vulnerability
parasolid
solid edge
out of bounds read
code execution
nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

31.3%

JSON

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All versions < V222.0MP12). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

Affected configurations

Nvd
Node
siemensparasolidRange34.0–34.0.254
OR
siemensparasolidRange34.1–34.1.242
OR
siemensparasolidRange35.0–35.0.170
OR
siemensparasolidRange35.1–35.1.150
OR
siemenssolid_edgeMatchse2022-
VendorProductVersionCPE
siemensparasolid*cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*
siemenssolid_edgese2022cpe:2.3:a:siemens:solid_edge:se2022:-:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "Parasolid V34.0",
    "versions": [
      {
        "version": "All versions < V34.0.254",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Parasolid V34.1",
    "versions": [
      {
        "version": "All versions < V34.1.242",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Parasolid V35.0",
    "versions": [
      {
        "version": "All versions < V35.0.170",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Parasolid V35.1",
    "versions": [
      {
        "version": "All versions < V35.1.150",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Solid Edge SE2022",
    "versions": [
      {
        "version": "All versions < V222.0MP12",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Related

cvelist 1
prion 1
cnvd 1
nvd 1
ics 2
cvelist
cvelist
CVE-2023-25140
2023-02-14 10:37:08
prion
prion
Out-of-bounds
2023-02-14 11:15:00
cnvd
cnvd
Siemens Parasolid and Solid Edge SE2022 out-of-bounds read vulnerability
2023-02-17 00:00:00
nvd
nvd
CVE-2023-25140
2023-02-14 11:15:17
ics
ics
Siemens JT Open, JT Utilities, and Parasolid
2023-02-16 12:00:00
Siemens Solid Edge
2023-02-16 12:00:00

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

31.3%

JSON
Related for CVE-2023-25140
cvelist1prion1cnvd1nvd1ics2