ICS Advisory: Siemens Parasolid

Here is a summary of the provided document:

Summary

This security advisory from the Cybersecurity and Infrastructure Security Agency (CISA) announces that Siemens will no longer update ICS security advisories for its product vulnerabilities beyond the initial advisory. The advisory concerns two vulnerabilities in Siemens Parasolid, a 3D geometric modeling tool, which can allow an attacker to execute code in the context of the current process. The vulnerabilities have a CVSS v3 base score of 7.8 and are exploitable on systems with unpatched versions of Parasold V34.1, V35.0, V35.1, and V36.0. To mitigate the risks, users are advised to update to the latest versions of Parasolid, avoid opening untrusted X_T files, and implement appropriate security measures. No public exploitation has been reported to CISA at this time.

Please note that this summary is a condensed version of the original document, and users are recommended to refer to the full document for more detailed information.