CVE-2022-39804CWE-119CWE-787

CVE-2022-39804: vulnerability in SAP 3D Visual Enterprise Author

Published · Updated

Follow this CVE+ Monitor SAP 3D Visual Enterprise Author

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.6%
Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Affected products
SAP SE · SAP 3D Visual Enterprise Author
Related CVEs — SAP 3D Visual Enterprise Author

In the same product, most dangerous first.

CVE-2022-41175—CVE-2022-41175EPSS 1.0%CVE-2022-41184—CVE-2022-41184EPSS 0.6%CVE-2022-39806—CVE-2022-39806EPSS 0.6%CVE-2022-39803—CVE-2022-39803EPSS 0.6%CVE-2022-41170—CVE-2022-41170EPSS 0.6%CVE-2022-41168—CVE-2022-41168EPSS 0.6%