CVE-2023-24581 Information

Description

A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12) Solid Edge SE2022 (All versions) Solid Edge SE2023 (All versions < V2023Update2). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19425)

Reference

https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf