deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-21647
Published: 2023-08-08
Description: Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-21648
Published: 2023-08-08
Description: Memory corruption in RIL while trying to send apdu packet.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-680, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-21649
Published: 2023-08-08
Description: Memory corruption in WLAN while running doDriverCmd for an unspecific command.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-21650
Published: 2023-08-08
Description: Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-129, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-21651
Published: 2023-08-08
Description: Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-704, CWE-704
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-21652
Published: 2023-08-08
Description: Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
CVSS Score: 7.7 (HIGH)
CWE: CWE-320, CWE-798
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-22666
Published: 2023-08-08
Description: Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVSS Score: 8.4 (HIGH)
CWE: CWE-190, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-27411
Published: 2023-08-08
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf
CVE: CVE-2023-28537
Published: 2023-08-08
Description: Memory corruption while allocating memory in COmxApeDec module in Audio.
CVSS Score: 8.4 (HIGH)
CWE: CWE-190, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-28555
Published: 2023-08-08
Description: Transient DOS in Audio while remapping channel buffer in media codec decoding.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-28561
Published: 2023-08-08
Description: Memory corruption in QESL while processing payload from external ESL device to firmware.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-28575
Published: 2023-08-08
Description: The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-823, CWE-843
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-28576
Published: 2023-08-08
Description: The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to out-of-bounds read/write issues.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-28577
Published: 2023-08-08
Description: In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-28830
Published: 2023-08-08
Description: A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions < V13.3.0.11), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted ASM file. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf
CVE: CVE-2023-30795
Published: 2023-08-08
Description: A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < V34.0.253), Parasolid V34.1 (All versions < V34.1.243), Parasolid V35.0 (All versions < V35.0.177), Parasolid V35.1 (All versions < V35.1.073). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-001569.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-001569.pdf
CVE: CVE-2023-30796
Published: 2023-08-08
Description: A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-001569.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-001569.pdf
CVE: CVE-2023-37372
Published: 2023-08-08
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf
CVE: CVE-2023-37373
Published: 2023-08-08
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages. An unauthenticated remote attacker could write arbitrary files to the affected application's file system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf
CVE: CVE-2023-38524
Published: 2023-08-08
Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected applications contain null pointer dereference while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 3.3 (LOW)
CWE: CWE-476, CWE-476
References: https://cert-portal.siemens.com/productcert/html/ssa-407785.html; https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf; https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE: CVE-2023-38525
Published: 2023-08-08
Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-407785.html; https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf; https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE: CVE-2023-38526
Published: 2023-08-08
Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-407785.html; https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf; https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE: CVE-2023-38527
Published: 2023-08-08
Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Teamcenter Visualization V14.1 (All versions), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-407785.html; https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf; https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE: CVE-2023-38528
Published: 2023-08-08
Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.197), Parasolid V35.1 (All versions < V35.1.184), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted X_T file. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/html/ssa-407785.html; https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf; https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE: CVE-2023-38529
Published: 2023-08-08
Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.184), Teamcenter Visualization V14.1 (All versions), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-407785.html; https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf; https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE: CVE-2023-38530
Published: 2023-08-08
Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-407785.html; https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf; https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE: CVE-2023-38531
Published: 2023-08-08
Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.184), Teamcenter Visualization V14.1 (All versions), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-407785.html; https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf; https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE: CVE-2023-38532
Published: 2023-08-08
Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-770, CWE-770
References: https://cert-portal.siemens.com/productcert/html/ssa-407785.html; https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf; https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE: CVE-2023-38641
Published: 2023-08-08
Description: A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as `NT AUTHORITY\SYSTEM`.
This could allow a local attacker to execute operating system commands with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://cert-portal.siemens.com/productcert/pdf/ssa-975961.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-975961.pdf
CVE: CVE-2023-38679
Published: 2023-08-08
Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21106)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf
CVE: CVE-2023-38680
Published: 2023-08-08
Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21132)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf
CVE: CVE-2023-38681
Published: 2023-08-08
Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21270)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf
CVE: CVE-2023-38682
Published: 2023-08-08
Description: A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions < V14.1.0.10), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf
CVE: CVE-2023-38683
Published: 2023-08-08
Description: A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions < V14.1.0.10), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted TIFF file. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf
CVE: CVE-2023-39181
Published: 2023-08-08
Description: A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf
CVE: CVE-2023-39182
Published: 2023-08-08
Description: A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf
CVE: CVE-2023-39183
Published: 2023-08-08
Description: A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf
CVE: CVE-2023-39184
Published: 2023-08-08
Description: A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf
CVE: CVE-2023-39185
Published: 2023-08-08
Description: A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf
CVE: CVE-2023-39186
Published: 2023-08-08
Description: A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf