Siemens Solid Edge

🗓️ 09 Jan 2024 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 28 Views

Siemens Solid Edge ICS security advisory for multiple vulnerabilities including heap-based buffer overflow and out-of-bounds read in PAR file parsing

Reporter	Title	Published	Views	Family All 139
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.	15 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to writing beyond buffer boundaries in memory, allowing a malicious actor to execute arbitrary code.	15 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to writing beyond buffer boundaries in memory, allowing a hacker to execute arbitrary code.	15 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to writing beyond buffer boundaries in memory, allowing a hacker to execute arbitrary code.	15 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to access to an uninitialized pointer, allowing a malicious actor to execute arbitrary code.	15 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to writing beyond buffer boundaries in memory, allowing a hacker to execute arbitrary code.	15 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.	15 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to access to an uninitialized pointer, allowing a malicious actor to execute arbitrary code.	15 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to access to an uninitialized pointer, allowing a malicious actor to execute arbitrary code.	12 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.	14 Feb 202400:00	–	bdu_fstec

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-589891.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-589891.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-589891.pdf
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-589891.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-011-11.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-011-11
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

09 Jan 2024 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.8

EPSS0.00205

SSVC