Siemens Solid Edge before V2023 MP1

🗓️ 10 Jan 2023 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 25 Views

Siemens Solid Edge V2023 MP1 security advisory for Improper Restriction of Operations in Memory Buffer with CVSS 7.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the dynamically linked library docmgmt.dll, which is part of the Siemens Solid Edge design and simulation tools, allows a hacker to execute arbitrary code.	27 Jan 202300:00	–	bdu_fstec
Circl	CVE-2022-47967	10 Jan 202314:28	–	circl
CNNVD	Siemens Solid Edge 缓冲区错误漏洞	10 Jan 202300:00	–	cnnvd
CNVD	Siemens Solid Edge File Parsing Vulnerability	13 Jan 202300:00	–	cnvd
CVE	CVE-2022-47967	10 Jan 202311:39	–	cve
Cvelist	CVE-2022-47967	10 Jan 202311:39	–	cvelist
EUVD	EUVD-2022-50685	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	10 Jan 202300:00	–	ncsc
NVD	CVE-2022-47967	10 Jan 202312:15	–	nvd
Prion	Memory corruption	10 Jan 202312:15	–	prion

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-997779.json
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-997779.txt
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-997779.pdf
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-012-11.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-012-11
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

10 Jan 2023 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.8

EPSS0.00128

SSVC

siemens solid edge memory buffer vulnerability exploitation security advisory cyber defense mitigations