Siemens has updates available to handle out-of-bounds read and out-of-bounds write vulnerabilities in its Parasolid, according to a report with CISA.
Successful exploitation of these vulnerabilities, discovered by an anonymous researcher working with Trend Micro Zero Day Initiative, could allow an attacker to execute code in the context of the current process.
Siemens reports these vulnerabilities affect the following Parasolid 3D geometric modeling tools
- Parasolid V34.0: versions prior to V34.0.252
- Parasolid V34.0: versions prior to V34.0.254
- Parasolid V34.1: versions prior to V34.1.242
- Parasolid V34.1: versions prior to V34.1.244
- Parasolid V35.0: versions prior to V35.0.184
- Parasolid V35.0: versions prior to V35.0.170
In one issue, Siemens Parasolid contains an out-of-bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVE-2022-39157 is the case number assigned to this vulnerability, which has a CVSS v3 base score of 7.8.
In addition, Siemens Parasolid contains an out-of-bounds write past the end of an allocated buffer while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVE-2022-43397 is the case number assigned to this vulnerability, which has a CVSS v3 base score of 7.8.
The product sees use mainly in the critical manufacturing sector, and on a global basis.
No known public exploits specifically target these vulnerabilities. These vulnerabilities are not exploitable remotely. These vulnerabilities have a low attack complexity.
Siemens released updates for the affected products and recommends updating to the latest versions:
- Parasolid V34.0: Update to V34.0.252 or later version
- Parasolid V34.0: Update to V34.0.254 or later version
- Parasolid V34.1: Update to V34.1.242 or later version
- Parasolid V34.1: Update to V34.1.244 or later version
- Parasolid V35.0: Update to V35.0.184 or later version
- Parasolid V35.0: Update to V35.0.170 or later version
Siemens has identified the following specific workaround and mitigation customers can apply to reduce the risk: Do not open untrusted X_T files in Parasolid.
As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens’ operational guidelines for industrial security and to follow the recommendations in the product manuals.
For more information, see the associated Siemens security advisory SSA-853037.