-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# SSA-997779: File Parsing Vulnerability in Solid Edge before V2023 MP1

Publication Date:        2023-01-10
Last Update:             2023-01-10
Current Version:         1.0
CVSS v3.1 Base Score:    7.8


SUMMARY
=======

Solid Edge is affected by memory corruption vulnerability that could
be triggered when the application read files in different file formats
such as PAR, ASM, DFT. If a user is tricked to open a malicious file
with the affected applications, an attacker could leverage the
vulnerability to perform remote code execution in the context of the
current process.

Siemens has released an update for Solid Edge and recommends to update
to the latest version.


AFFECTED PRODUCTS AND SOLUTION
==============================


* Solid Edge 
  - Affected versions:
       All versions < V2023 MP1
  - Remediation:
       Update to V2023 MP1 or later version

       See further recommendations from section "Workarounds and Mitigations"


WORKAROUNDS AND MITIGATIONS
===========================

Siemens has identified the following specific workarounds and mitigations that
customers can apply to reduce the risk:

  * Do not open untrusted files in Solid Edge

Product-specific remediations or mitigations can be found in the section
"Affected Products and Solution".
Please follow the "General Security Recommendations".

GENERAL SECURITY RECOMMENDATIONS
================================

As a general security measure, Siemens strongly recommends to protect
network access to devices with appropriate mechanisms. In order to
operate the devices in a protected IT environment, Siemens recommends
to configure the environment according to Siemens' operational
guidelines for Industrial Security (Download:

https://www.siemens.com/cert/operational-guidelines-industrial-
security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found
at: https://www.siemens.com/industrialsecurity


PRODUCT DESCRIPTION
===================

Solid Edge is a portfolio of software tools that addresses various
product development processes: 3D design, simulation, manufacturing
and design management.

VULNERABILITY CLASSIFICATION
============================

The vulnerability classification has been performed by using the CVSS scoring
system in version 3.1 (CVSS v3.1) (https://www.first.org/cvss/). The CVSS
environmental score is specific to the customer's environment and will impact
the overall CVSS score. The environmental score should therefore be
individually defined by the customer to accomplish final scoring.

An additional classification has been performed using the CWE classification, a
community-developed list of common software security weaknesses. This serves as
a common language and as a baseline for weakness identification, mitigation,
and prevention efforts. A detailed list of CWE classes can be found at:
https://cwe.mitre.org/.



* Vulnerability CVE-2022-47967

  The DOCMGMT.DLL contains a memory corruption vulnerability that
  could be triggered while parsing files in different file formats
  such as PAR, ASM, DFT. This could allow an attacker to execute code
  in the context of the current process.

    CVSS v3.1 Base Score: 7.8
    CVSS Vector:          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
    CWE:                  CWE-119: Improper Restriction of Operations within the Bounds of
                          a Memory Buffer




ACKNOWLEDGMENTS
===============

Siemens thanks the following party for its efforts:

   * Michael Heinzl for reporting the vulnerability


ADDITIONAL INFORMATION
======================

For further inquiries on security vulnerabilities in Siemens products and
solutions, please contact the Siemens ProductCERT:

https://www.siemens.com/cert/advisories


HISTORY DATA
============

V1.0 (2023-01-10): Publication Date

TERMS OF USE
============

Siemens Security Advisories are subject to the terms and conditions contained
in Siemens' underlying license terms or other applicable agreements previously
agreed to with Siemens (hereinafter "License Terms"). To the extent applicable
to information, software or documentation made available in or through a
Siemens Security Advisory, the Terms of Use of Siemens' Global Website
(https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in
particular Sections 8-10 of the Terms of Use, shall apply additionally. In case
of conflicts, the License Terms shall prevail over the Terms of Use.

Copyright: Siemens 2023
-----BEGIN PGP SIGNATURE-----
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=4Fov
-----END PGP SIGNATURE-----