Siemens PS/IGES Parasolid Translator Component

Here is a summary of the document in a concise format:

Vulnerability Summary:

Product: PS/IGES Parasolid Translator Component
Vendor: Siemens
Version: Prior to V27.1.215
Vulnerability Type: Out-of-bounds read, Type confusion, Improper restriction of operations within the bounds of a memory buffer
CVSS v3 Score: 7.8 (High)
CVSS v4 Score: 7.3 (High)
Description: The affected application contains vulnerabilities that could allow an attacker to execute code in the context of the current process.

Mitigation: Update to V27.1.215 or later version. Implement defensive measures to minimize the risk of exploitation, such as not opening untrusted IGS files and configuring the environment according to Siemens' operational guidelines for industrial security.

Additional Information:

A CVSS v3 and v4 score has been calculated for each vulnerability.
The vulnerabilities are not exploitable remotely and no known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
The recommended mitigation steps and additional security measures are available on the Siemens security advisory webpage and CISA's ICS webpage.