CVE-2023-39419

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.

• CWE-787
• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdfPatch, Vendor Advisory

Published

Aug 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39413Multiple integer underflow vulnerabilities exist in the LXT2…7.8
• CVE-2023-39414Multiple integer underflow vulnerabilities exist in the LXT2…7.3
• CVE-2023-39415Improper authentication vulnerability in Proself Enterprise/…7.5
• CVE-2023-39416Proself Enterprise/Standard Edition Ver5.61 and earlier, Pro…7.2
• CVE-2023-39417IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was f…8.8
• CVE-2023-39418A vulnerability was found in PostgreSQL with the use of the …4.3
• CVE-2023-3942An 'SQL Injection' vulnerability, due to improper neutraliza…7.5
• CVE-2023-39420The RDPCore.dll component as used in the IRM Next Generation…8.8
• CVE-2023-39421The RDPWin.dll component as used in the IRM Next Generation …7.7
• CVE-2023-39422The /irmdata/api/ endpoints exposed by the IRM Next Generati…9.8
• CVE-2023-39423The RDPData.dll file exposes the /irmdata/api/common endpoin…9.1
• CVE-2023-39424A vulnerability in RDPngFileUpload.dll, as used in the IRM N…8.8