THE CISA advisory ICSA-26-225-10 addresses a critical vulnerability in Siemens' Parasolid software, which is susceptible to an out-of-bounds read when parsing X_T files. This issue can lead to application crashes or arbitrary code execution. Affected versions include Parasolid V38.0 before 38.0.235 and V38.1 before 38.1.230. Siemens recommends updating to the latest versions to mitigate risks. The advisory emphasizes the importance of securing network access and following operational guidelines for Cybersecurity. The CVSS score for this vulnerability is 7.8, indicating high severity.
Siemens Parasolid flaw enables code execution via X_T files
CyberSIXT Evidence Panel
Source marked as original reporting
Article by CyberSIXT