PT-2023-6597 · Mentor Graphics · Xpedition Layout Browser

Published 2023-10-10 · Updated 2023-10-16 · CVE-2023-30900

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xpedition Layout Browser versions prior to VX.2.14

Description A stack overflow vulnerability has been identified in the affected application when parsing a PCB file. This issue can be leveraged by an attacker to execute code in the context of the current process.

Recommendations For versions prior to VX.2.14, update to version VX.2.14 or later to resolve the issue. As a temporary workaround, consider restricting the parsing of PCB files from untrusted sources until a patch is applied.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2023-07363

CVE-2023-30900

Affected Products

Xpedition Layout Browser

References · 5

• https://bdu.fstec.ru/vul/2023-07363 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-829656.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-30900 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30900 · Security Note
• https://t.me/cibsecurity/71913 · Telegram Post