CVE-2023-49125

CVE-2023-49125 affects Siemens Parasolid and Solid Edge products. The vulnerability is an out-of-bounds read past the end of an allocated structure when parsing XT format files, which could allow code execution in the context of the current process. Affected: Parasolid V35.0 (<263), V35.1 (&lt...

CVE-2023-49124

CVE-2023-49124 affects Solid Edge SE2023 prior to V223.0 Update 10. The fault is an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, enabling code execution in the current process context. Public mitigations point to updating Solid Edge SE2023 t...

CVE-2022-46345

CVE-2022-46345 is an out-of-bounds write in Siemens’ Parasolid parsing of X_B files, enabling code execution in the affected process. Affected products/versions include Parasolid V33.1 (all versions < 33.1.264), V34.0 (all versions < 34.0.252), V34.1 (all versions < 34.1.242), V35.0 (all...

CVE-2023-24581

CVE-2023-24581 affects Siemens Solid Edge SE2022/SE2023. A use‑after‑free vulnerability can be triggered while parsing specially crafted STP files, enabling code execution in the current process. Affected: Solid Edge SE2022 < V222.0MP12 and SE2023

CVE-2022-46346

Summary: CVE-2022-46346 affects Siemens Parasolid (kernel) and related Solid Edge products, caused by an out-of-bounds write while parsing crafted X_B files. This can lead to code execution in the current process context. Affected versions: Parasolid V33.1: all versions < 33.1.264 Parasolid V3...

CVE-2023-28830

CVE-2023-28830 affects Siemens JT2Go and related Solid Edge/Teamcenter Visualization products. A use-after-free vulnerability may be triggered while parsing specially crafted ASM files, potentially allowing code execution in the current process. Affected versions: JT2Go <14.2.0.5; Solid Edge S...

CVE-2023-24550

Solid Edge heap-based buffer overflow CVE-2023-24550 affects Solid Edge SE2022 (all versions) and SE2023 (all versions) via parsing of specially crafted PAR files, enabling potentially code execution in the current process. The root cause is a heap-buffer issue during PAR file parsing. Siemens Pr...

CVE-2023-24564

Summary: CVE-2023-24564 affects Siemens Solid Edge SE2022 and SE2023. A memory corruption vulnerability occurs while parsing specially crafted DWG files, likely due to a buffer/memory handling issue. Impact per sources: potential code execution in the current process with local access and user in...

CVE-2023-24560

CVE-2023-24560 affects Siemens Solid Edge SE2022 (< V222.0MP12) and SE2023 (

CVE-2023-30986

Siemens Solid Edge SE2023 (before V223.0 Update 3) is affected by a memory corruption vulnerability in STP file parsing (CVE-2023-30986) identified in PT-2022-6626. The issue can allow code execution in the current process when handling specially crafted STP files. A patch exists: update to V223....

CVE-2023-49126

Summary (CVE-2023-49126) Solid Edge SE2023 (all versions prior to V223.0 Update 10) contains an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, which could allow code execution in the current process. Affected product: Solid Edge SE2023. Vulner...

CVE-2023-30985

CVE-2023-30985 affects Siemens Solid Edge SE2023 (pre-update 2 and pre-update 3 releases). The vulnerability is an out-of-bounds read past the end of an allocated buffer when parsing a specially crafted OBJ file, which could disclose sensitive information. Affected versions: Solid Edge SE2023 pri...

CVE-2023-24554

CVE-2023-24554 affects Siemens Solid Edge SE2022 (all versions) and SE2023 (all versions) with an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, enabling code execution in the current process. Affected products: Solid Edge SE2022 prior to V222...

CVE-2023-24566

Solid Edge SE2022 (all versions) prior to V222.0MP12 and SE2023 prior to V223.0Update2 contain a stack-based buffer overflow while parsing specially crafted PAR files. The issue can allow code execution in the current process context. Siemens ProductCERT SSA-491245 confirms affected versions and ...

CVE-2023-24553

The CVE-2023-24553 vulnerability affects Siemens Solid Edge: SE2022 (all versions before V222.0MP12) and SE2023 (all versions before V223.0Update2). The issue is an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, which could allow code executio...

CVE-2023-24561

Solid Edge SE2022 (all versions) and SE2023 (all versions) are affected by an uninitialized pointer access when parsing specially crafted PAR files, potentially enabling code execution in the current process. Affected versions are prior to V222.0MP12 (SE2022) and prior to V223.0Update2 (SE2023). ...

CVE-2023-24562

Solid Edge SE2022 (all versions < V222.0MP12) and SE2023 (all versions

CVE-2023-24565

Solid Edge CVE-2023-24565 describes an out-of-bounds read when parsing specially crafted STL files, affecting Solid Edge SE2022 (all versions prior to V222.0MP12) and SE2023 (all versions prior to V223.0Update2). The root cause is a buffer overread during STL parsing, potentially exposing memory ...

CVE-2023-24559

CVE-2023-24559 – concrete details from connected document : Siemens Solid Edge SE2022 (all versions before V222.0MP12) and SE2023 (all versions before V223.0Update2) are affected by an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files. This memory...

CVE-2023-24552

Summary (fact-based, mode C): Solid Edge SE2022 (all versions) and SE2023 (all versions) are affected by a vulnerability that could allow code execution via an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. The issue is described in CVE-2023-245...

CVE-2023-49131

CVE-2023-49131 concerns Siemens Solid Edge SE2023 (all versions prior to V223.0 Update 10). The issue is an uninitialized pointer access during parsing of specially crafted PAR files, enabling code execution in the current process. Affected product: Solid Edge SE2023. Root cause: uninitialized po...

CVE-2023-24549

Solid Edge SE2022 (all versions before v222.0MP12) and SE2023 (all versions before v223.0Update2) are affected by a stack-based buffer overflow while parsing specially crafted PAR files, which could allow code execution in the current process. Siemens has released updates: SE2022 to at least v221...

CVE-2023-49132

Solid Edge SE2023 (all versions

CVE-2023-24556

Solid Edge CVE-2023-24556 affects Siemens Solid Edge SE2022 (all versions) and SE2023 (all versions) with an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files. The vulnerability could allow code execution in the context of the current process. Pub...

CVE-2023-24558

CVE-2023-24558 affects Siemens Solid Edge SE2022 (all versions) and SE2023 (all versions) with an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, enabling code execution in the current process. Connected sources confirm the vulnerable component...

CVE-2023-49122

Solid Edge SE2023 (all versions before V223.0 Update 10) is affected by a heap-based buffer overflow while parsing specially crafted PAR files, which could allow code execution in the current process. The issue, CVE-2023-49122, is documented across multiple sources (including NVD and Red Hat CVE ...

CVE-2023-49130

CVE-2023-49130 affects Siemens/Solid Edge SE2023: all versions before V223.0 Update 10 are vulnerable to uninitialized pointer access while parsing specially crafted PAR files, allowing code execution in the current process (local). Affected product: Solid Edge SE2023; component: PAR file parsing...

CVE-2023-24563

CVE-2023-24563 affects Siemens Solid Edge SE2022 (all versions) and SE2023 (all versions) with an uninitialized pointer access vulnerability during parsing of specially crafted PAR files, potentially allowing code execution in the current process. Root cause is an uninitialized pointer on the sta...

CVE-2023-49123

Solid Edge SE2023 is affected by CVE-2023-49123: a heap-based buffer overflow while parsing specially crafted PAR files can lead to code execution in the current process. Affected products: Solid Edge SE2023 (all versions

CVE-2023-49128

CVE-2023-49128 - Siemens Solid Edge SE2023 : Affected: all SE2023 versions prior to V223.0 Update 10. Vulnerability: out-of-bounds write past the end of an allocated buffer while parsing a specially crafted PAR file, potentially enabling code execution in the current process. Evidence from Siemen...

CVE-2023-24551

CVE-2023-24551 affects Siemens/Solid Edge SE2022 and SE2023. The issue is a heap-based buffer underflow when parsing specially crafted PAR files, enabling code execution in the current process. Affected products are: Solid Edge SE2022: all versions prior to V222.0MP12 Solid Edge SE2023: all versi...

CVE-2023-24557

Solid Edge SE2022 (all versions before V222.0MP12) and SE2023 (all versions before V223.0Update2) are affected by an out-of-bounds read while parsing PAR files, which could allow code execution in the current process. Root cause: reading past the end of an allocated structure during PAR file pars...

CVE-2023-49121

CVE-2023-49121 affects Siemens Solid Edge SE2023 prior to V223.0 Update 10. The issue is a heap-based buffer overflow when parsing specially crafted PAR files, potentially allowing code execution in the affected process. Publicly documented impact is a CVSS v3.1 base score of 7.8 (HIGH) with LOCA...

CVE-2023-49129

Solid Edge SE2023 (All versions

CVE-2023-24555

Solid Edge SE2022 (all versions before V222.0MP12) and SE2023 (all versions before V223.0Update2) are affected by an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, potentially allowing code execution in the process context. MITRE/ATT&CK not ex...

CVE-2023-49127

The CVE-2023-49127 issue affects Solid Edge SE2023 (all versions before V223.0 Update 10). The Solaris? No, Siemens Solid Edge parsing PAR files yields an out-of-bounds read past an allocated structure, enabling possible code execution in the current process. Red Hat and multiple security advisor...