Status: UPDATED
| Advisory ID: CVE-2026-64629
Key Details
| CVE | CVE-2026-64629 |
| CVSS Score / Version | 7.8 (High) / CVSS v3.1 |
| Updated | 2026-08-28 |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CVSS Prose | attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high. |
| Affected products | Siemens Parasolid V38.0 and Siemens Parasolid V38.1 |
| Classified as | CWE-125 (Out-of-bounds Read) |
Affected Products, Subsystems & Sectors
| Subsystems | General OT |
| Sectors | Multiple |
What to Know
A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (NVD)
What to Do
Monitor Siemens's web page for any future patch releases.
References