CVE-2024-54095

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
Wrap or Wraparound
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
siemensCNA
7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
VendorProductVersion
siemenssolid_edge_se2024
𝑥
< 224.0
siemenssolid_edge_se2024
224.0
siemenssolid_edge_se2024
224.0:update_0001
siemenssolid_edge_se2024
224.0:update_0002
siemenssolid_edge_se2024
224.0:update_0003
siemenssolid_edge_se2024
224.0:update_0004
siemenssolid_edge_se2024
224.0:update_0005
siemenssolid_edge_se2024
224.0:update_0006
siemenssolid_edge_se2024
224.0:update_0007
siemenssolid_edge_se2024
224.0:update_0008
siemenssolid_edge_se2024
224.0:update_0009
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cert-portal.siemens.com/productcert/html/ssa-730188.html