CVE-2023-25140: parasolid from 34.0 (inclusive), before 34.0.254 (exclusive), from 34.1 (inclusive), before 34.1.242 (exclusive), from…

Affected technology

parasolid · from 34.0 (inclusive), before 34.0.254 (exclusive)
siemens

parasolid · from 34.1 (inclusive), before 34.1.242 (exclusive)
siemens

parasolid · from 35.0 (inclusive), before 35.0.170 (exclusive)
siemens

parasolid · from 35.1 (inclusive), before 35.1.150 (exclusive)
siemens

solid edge · se2022
siemens

Parasolid V34.0 · All versions < V34.0.254
Siemens

Parasolid V34.1 · All versions < V34.1.242
Siemens

Parasolid V35.0 · All versions < V35.0.170
Siemens

Parasolid V35.1 · All versions < V35.1.150
Siemens

Solid Edge SE2022 · All versions < V222.0MP12
Siemens

Description’s affected range: versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Soli

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · No privileges required · User interaction required

Attack conditions (NVD, CVSS 3.1): Local · No privileges required · User interaction required

What an attacker can do

An attacker could execute code in the context of the current process. Vendor/CNA’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.