Siemens Solid Edge
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or PSM format, and by a DLL hijacking vulnerability. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a new version for Solid Edge SE2024 and recommends to update to the latest version.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-47942US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijacking vulnerability. This could allow an… | ||||
| CVE-2024-47941US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2024-47940US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
references
External citations — patches, advisories, analysis.
- SSA-351178: Multiple Vulnerabilities in Solid Edge Before SE2024 Update 9 - CSAF Versionself
- SSA-351178: Multiple Vulnerabilities in Solid Edge Before SE2024 Update 9 - HTML Versionself
- ICS Advisory ICSA-24-319-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-319-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- MitigationSolid Edge SE2024
Do not open untrusted PAR files in affected applications
- MitigationSolid Edge SE2024
Do not open untrusted PSM files in affected applications
- FixedSolid Edge SE2024
Update to V224.0 Update 9 or later version
- FixedSolid Edge SE2024
Update to V224.0 Update 9 or later version
- FixedSolid Edge SE2024
Update to V224.0 Update 9 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan