{"id":"CVE-2023-30985","aliases":["EUVD-2023-35323","GHSA-r26h-mc72-92q2"],"status":"published","title":"A vulnerability has been identified in Solid Edge SE2023 (All versions \u003c VX.223.0 Update 3),...","description":"A vulnerability has been identified in Solid Edge SE2023 (All versions \u003c V223.0 Update 3), Solid Edge SE2023 (All versions \u003c V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00201,"percentile":0.10068,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2023-05-09T11:51:38Z","modified":"2026-10-23T23:10:00Z","products":[{"vendor":"siemens","product":"solid edge se2023"},{"vendor":"siemens","product":"solid_edge_se2023"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-932528.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30985"},{"url":"https://github.com/advisories/GHSA-r26h-mc72-92q2"}],"sources":{"cve":[{"id":"CVE-2023-30985","description":"A vulnerability has been identified in Solid Edge SE2023 (All versions \u003c V223.0 Update 3), Solid Edge SE2023 (All versions \u003c V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)","status":"published","published":"2023-05-09T11:51:38.608Z","modified":"2025-01-28T16:46:48.235Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C","level":"low","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:22.309324Z"}],"euvd":[{"id":"EUVD-2023-35323","description":"A vulnerability has been identified in Solid Edge SE2023 (All versions \u003c V223.0 Update 3), Solid Edge SE2023 (All versions \u003c V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)","status":"published","published":"2023-05-09T11:51:38Z","modified":"2025-01-28T16:46:48Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C","level":"low"}],"updated_at":"2026-11-03T00:04:11.289823Z"}],"ghsa":[{"id":"GHSA-r26h-mc72-92q2","title":"A vulnerability has been identified in Solid Edge SE2023 (All versions \u003c VX.223.0 Update 3),...","description":"A vulnerability has been identified in Solid Edge SE2023 (All versions \u003c VX.223.0 Update 3), Solid Edge SE2023 (All versions \u003c VX.223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)","status":"published","published":"2023-05-09T15:30:32Z","modified":"2024-04-04T03:55:26Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:56:19.559732Z"}],"nvd":[{"id":"CVE-2023-30985","description":"A vulnerability has been identified in Solid Edge SE2023 (All versions \u003c V223.0 Update 3), Solid Edge SE2023 (All versions \u003c V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)","status":"published","published":"2023-05-09T13:15:18.267Z","modified":"2026-10-23T23:10:00.157Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:08:01.131774Z"}]}}