CVE-2023-0973
Assigner: icscert
Published: 2023-03-13T17:06:05.431Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: v18SP1 ifcmesh library
vendor: Step Tools
versions: status: affected
version: v18.1
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Siemens reported this third-party vulnerability to CISA.
datePublic: 2023-03-09T18:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application crash.</span>


value: 
STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application crash.


metrics: cvssV3_1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.2
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-476
description: CWE-476 NULL Pointer Dereference
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">STEPTools has provided an updated version of their software and recommends users update to v18.102. STEPTools requests users contact them via </span><a target="_blank" rel="nofollow">email</a><span style="background-color: rgb(255, 255, 255);">&nbsp;for assistance with obtaining and applying the update.</span>

<br>
value: 
STEPTools has provided an updated version of their software and recommends users update to v18.102. STEPTools requests users contact them via email for assistance with obtaining and applying the update.



source: advisory: ICSA-23-068-04
discovery: EXTERNAL
title: Step Tools Third-Party
x_generator: engine: Vulnogram 0.1.0-dev