SSA-730188: Multiple File Parsing Vulnerabilities in Solid Edge V2024
Siemens Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious PAR or ASM files. If a user is tricked to open a malicious file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Solid Edge SE2024 and recommends to update to the latest version.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-54095US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be t… | ||||
| CVE-2024-54094US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specia… | ||||
| CVE-2024-54093US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specia… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationSolid Edge SE2024
Do not open untrusted ASM files in the affected applications
- MitigationSolid Edge SE2024
Do not open untrusted PAR files in the affected applications
- MitigationSolid Edge SE2024
Do not open untrusted PAR files in the affected applications
- FixedSolid Edge SE2024
Update to V224.0 Update 10 or later version
- FixedSolid Edge SE2024
Update to V224.0 Update 5 or later version
- FixedSolid Edge SE2024
Update to V224.0 Update 5 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan