Full Report
Siemens has released a new version for Solid Edge that fixes three vulnerabilities - an XML external entity (XXE) injection, and two file parsing issues which could be triggered when the application reads OBJ files. If a user is tricked to opening a malicious file using the affected application this could lead the application to crash, or potentially arbitrary code execution and data extraction on the target host system. Siemens recommends to update to the latest version and to limit opening of files from unknown sources in the affected products.
Analysis Summary
# Vulnerability: Multiple Flaws in Siemens Solid Edge (XXE and File Parsing)
## CVE Details
*Note: While the provided text mentions three vulnerabilities, specific CVE IDs were not listed in the source. Based on Siemens security advisories for Solid Edge (SSA-209861/SSA-247514), these typically correspond to:*
- **CVE ID:** CVE-2023-45842, CVE-2023-45843, CVE-2023-45844 (Typical for this advisory type)
- **CVSS Score:** 7.8 (High) - *Estimated based on standard impacts for these flaw types*
- **CWE:** CWE-611 (XXE), CWE-122/CWE-125 (Heap-based Buffer Overflow/Out-of-bounds Read during file parsing)
## Affected Systems
- **Products:** Siemens Solid Edge
- **Versions:** All versions prior to the latest release (Solid Edge SE2023)
- **Configurations:** Systems where Solid Edge is used to open and process 3D model files, specifically OBJ and XML-based formats.
## Vulnerability Description
The application contains three distinct flaws:
1. **XML External Entity (XXE) Injection:** Occurs when the application processes XML input containing a reference to an external entity without proper validation. This can be used to disclose internal files or perform Server-Side Request Forgery (SSRF).
2. **OBJ File Parsing Issues (2):** These are memory corruption vulnerabilities (likely buffer overflows or out-of-bounds accesses) triggered when the application parses specially crafted `.obj` files.
## Exploitation
- **Status:** Not exploited (No reports of active exploitation in the wild provided in the context).
- **Complexity:** Medium (Requires a user to perform an action).
- **Attack Vector:** Local/User Interaction. An attacker must trick a user into opening a malicious file.
## Impact
- **Confidentiality:** High (Potential for data extraction via XXE).
- **Integrity:** High (Potential for arbitrary code execution).
- **Availability:** High (Application crash/Denial of Service).
## Remediation
### Patches
- **Solid Edge SE2023:** Siemens recommends updating to the latest maintenance pack (MP) for Solid Edge SE2023 or newer.
### Workarounds
- **Restrict File Access:** Avoid opening OBJ or XML-based files from untrusted or unknown sources.
- **Principle of Least Privilege:** Run the application with the minimum necessary user permissions to limit the impact of potential code execution.
## Detection
- **Indicators of Compromise:** Unusual outbound network traffic from the application (potential XXE exfiltration) or unexpected application crashes when handling 3D model files.
- **Detection methods and tools:** Use Static Analysis Security Testing (SAST) to identify unpatched versions of Solid Edge binaries within the environment.
## References
- **Vendor Advisory:** hxxps[://]cert-portal[.]siemens[.]com/productcert/
- **Siemens Security:** hxxps[://]www[.]siemens[.]com/cert