Siemens Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application is parsing PAR files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to execute arbitrary code in the context of the current process. Siemens has released a new version for Solid Edge and recommends to update to the latest version.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-34773US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected applications contain a stack overflow vulnerability while parsing specially crafted… | ||||
| CVE-2024-34772US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 4). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-34771US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected application is vulnerable to heap-based buffer overflow while parsing specially cra… | ||||
| CVE-2024-33493US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-33492US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-33491US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-33490US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-33489US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially cra… | ||||
references
External citations — patches, advisories, analysis.
- SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge - CSAF Versionself
- SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge - HTML Versionself
- SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge - PDF Versionself
- SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge - TXT Versionself
- ICS Advisory ICSA-24-137-09 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-137-09 - Web Versionself
- Recommended Practicesexternal
remediations (16)
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- FixedSolid Edge
Update to V224.0 Update 2 or later version
- FixedSolid Edge
Update to V224.0 Update 2 or later version
- FixedSolid Edge
Update to V224.0 Update 4 or later version
- FixedSolid Edge
Update to V224.0 Update 5 or later version
- FixedSolid Edge
Update to V224.0 Update 5 or later version
- FixedSolid Edge
Update to V224.0 Update 5 or later version
- FixedSolid Edge
Update to V224.0 Update 5 or later version
- FixedSolid Edge
Update to V224.0 Update 5 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan