Assigner | siemens |
Reserved | 2024-04-16 |
Published | 2024-05-14 |
Updated | 2024-06-18 |
Description
A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.256), Parasolid V36.0 (All versions < V36.0.208), Parasolid V36.1 (All versions < V36.1.173). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted X_T files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
Problem types
CWE-476: NULL Pointer Dereference
Product status
Any version before V35.1.256
Any version before V36.0.208
Any version before V36.1.173
References
https://cert-portal.siemens.com/productcert/html/ssa-046364.html