Veille CVE

Mardi 14 février 2023

37 CVE sur 39

Critique 1 Élevée 37 Moyenne 0 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-25140 7.8 Élevée

    Siemens Parasolid V34.0 · Siemens Parasolid V34.1 · Siemens Parasolid V35.0 · Siemens Parasolid V35.1

    A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All versions < V222.0MP12). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

  2. CVE-2023-24996 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19818)

  3. CVE-2023-24995 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19817)

  4. CVE-2023-24994 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19816)

  5. CVE-2023-24993 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19815)

  6. CVE-2023-24992 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19814)

  7. CVE-2023-24991 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19813)

  8. CVE-2023-24990 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19812)

  9. CVE-2023-24989 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19811)

  10. CVE-2023-24988 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19810)

  11. CVE-2023-24987 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19809)

  12. CVE-2023-24986 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19808)

  13. CVE-2023-24985 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19807)

  14. CVE-2023-24984 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19806)

  15. CVE-2023-24983 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19805)

  16. CVE-2023-24982 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19804)

  17. CVE-2023-24981 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19791)

  18. CVE-2023-24980 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19790)

  19. CVE-2023-24979 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19789)

  20. CVE-2023-24978 7.8 Élevée

    Siemens Tecnomatix Plant Simulation

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19788)

  21. CVE-2023-24581 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19425)

  22. CVE-2023-24564 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a memory corruption vulnerability while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19069)

  23. CVE-2023-24563 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

  24. CVE-2023-24562 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

  25. CVE-2023-24561 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

  26. CVE-2023-24560 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.

  27. CVE-2023-24558 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

  28. CVE-2023-24557 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

  29. CVE-2023-24556 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

  30. CVE-2023-24554 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

  31. CVE-2023-24552 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.

  32. CVE-2023-24551 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

  33. CVE-2023-24550 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

  34. CVE-2023-24549 7.8 Élevée

    Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

  35. CVE-2022-47977 7.8 Élevée

    Siemens JT Open · Siemens JT Utilities · Siemens jt open toolkit

    A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

  36. CVE-2022-47936 7.8 Élevée

    Siemens JT Open · Siemens JT Utilities · Siemens Parasolid V34.0 · Siemens Parasolid V34.1

    A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

  37. CVE-2022-31808 7.8 Élevée

    Siemens SiPass integrated AC5102 (ACC-G2) · Siemens SiPass integrated ACC-AP · Siemens sipass integrated acc-ap firmware · Siemens sipass integrated ac5102 \(acc-g2\) firmware

    A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.