{"id":"CVE-2022-47967","aliases":["EUVD-2022-50685","GHSA-gch5-jf24-9j9p"],"status":"published","title":"A vulnerability has been identified in Solid Edge (All versions \u003c V2023 MP1). The DOCMGMT.DLL...","description":"A vulnerability has been identified in Solid Edge (All versions \u003c V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggered while parsing files in different file formats such as PAR, ASM, DFT. This could allow an attacker to execute code in the context of the current process.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0029,"percentile":0.2178,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-787"],"published":"2023-01-10T11:39:48Z","modified":"2026-06-17T05:14:31Z","products":[{"vendor":"siemens","product":"solid edge"},{"vendor":"siemens","product":"solid_edge"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-997779.pdf","tags":["x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-47967"},{"url":"https://github.com/advisories/GHSA-gch5-jf24-9j9p"}],"sources":{"cve":[{"id":"CVE-2022-47967","description":"A vulnerability has been identified in Solid Edge (All versions \u003c V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggered while parsing files in different file formats such as PAR, ASM, DFT. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2023-01-10T11:39:48.279Z","modified":"2025-04-08T14:21:08.39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:34:24.971323Z"}],"euvd":[{"id":"EUVD-2022-50685","description":"A vulnerability has been identified in Solid Edge (All versions \u003c V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggered while parsing files in different file formats such as PAR, ASM, DFT. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2023-01-10T11:39:48Z","modified":"2025-04-08T14:21:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T20:52:40.053562Z"}],"ghsa":[{"id":"GHSA-gch5-jf24-9j9p","title":"A vulnerability has been identified in Solid Edge (All versions \u003c V2023 MP1). The DOCMGMT.DLL...","description":"A vulnerability has been identified in Solid Edge (All versions \u003c V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggered while parsing files in different file formats such as PAR, ASM, DFT. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2023-01-10T12:30:22Z","modified":"2023-06-22T21:30:47Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:54:38.89081Z"}],"nvd":[{"id":"CVE-2022-47967","description":"A vulnerability has been identified in Solid Edge (All versions \u003c V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggered while parsing files in different file formats such as PAR, ASM, DFT. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2023-01-10T12:15:23.9Z","modified":"2026-06-17T05:14:31.617Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:07:35.157734Z"}]}}