CVE-2023-39186 | Vulnetix

CVE-2023-39186 PUBLISHED CVSS 7.8 HIGH

Reported by siemens · Published August 8, 2023

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.

Risk scores

CVSS 3.1

7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected products

Vendor	Product	Versions
Siemens	Solid Edge SE2023	All versions < V223.0 Update 7
Siemens	Solid Edge SE2023	*

Timeline

Aug 8, 2023 CVE Published
Aug 9, 2023 EPSS Score (30 in total, the first dated here)
Jun 2, 2026 Security Advisory
Aug 5, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2023-39186
vulnetix vdb fixes CVE-2023-39186

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-39186/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →