CVE-2023-24581 (published 2023-02-14T10:36:46.345Z)
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19425)
Affected products: Vendor: Siemens
Product: Solid Edge SE2022
Versions: All versions < V222.0MP12