CVE-2023-49128

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to execute code in the context of the current process.

• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-589891.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-589891.pdfVendor Advisory

Published

Jan 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49122A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-49123A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-49124A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-49125A vulnerability has been identified in Parasolid V35.0 (All …7.8
• CVE-2023-49126A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-49127A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-49129A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-4913Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2023-49130A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-49131A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-49132A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-49133A command execution vulnerability exists in the tddpd enable…9.8