CVE-2022-46348highCWE-787

CVE-2022-46348: high-severity vulnerability in Siemens Parasolid V33.1

Published · Updated

Follow this CVE+ Monitor Parasolid+ Monitor Solid Edge SE2023

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.3%
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted X_B files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19383)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected products
Siemens · Parasolid V33.1Siemens · Parasolid V34.0Siemens · Parasolid V34.1Siemens · Parasolid V35.0Siemens · Solid Edge SE2022Siemens · Solid Edge SE2023
Related CVEs — Siemens Parasolid V33.1

In the same product, most dangerous first.

CVE-2022-34465—CVE-2022-34465EPSS 1.0%CVE-2022-46349HIGHCVE-2022-46349EPSS 0.5%CVE-2022-46347HIGHCVE-2022-46347EPSS 0.5%CVE-2022-46345HIGHCVE-2022-46345EPSS 0.3%CVE-2022-46346HIGHCVE-2022-46346EPSS 0.3%CVE-2022-39156—CVE-2022-39156EPSS 0.3%