Veille CVE

Mardi 9 mai 2023

2 CVE sur 14

Critique 1 Élevée 8 Moyenne 2 Faible 3 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-30985 5.5 Moyenne

    Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)

  2. CVE-2023-29107 5.3 Moyenne

    Siemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Cloud Connect 7 CC716 · Siemens 6gk1411-1ac00 firmware · Siemens 6gk1411-5ac00 firmware

    A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint discloses some undocumented files. This could allow an unauthenticated remote attacker to gain access to additional information resources.