CVE-2023-25140 - CVE House
Back to Database
Status published High CVE-2023-25140

A vulnerability has been identified in Parasolid V34.0 (All versions...

Vulnerability Description

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All versions < V222.0MP12). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-25140

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Parasolid V34.0, Parasolid V34.1, Parasolid V35.0, Parasolid V35.1, Solid Edge SE2022
Vulnerable Versions:
All versions < V34.0.254, All versions < V34.1.242, All versions < V35.0.170, All versions < V35.1.150, All versions < V222.0MP12

Timeline

Official Publish: February 14th, 2023
Last Modified: March 19th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Weaknesses (CWE)