SSA-730188: Multiple File Parsing Vulnerabilities in Solid Edge V2024
Siemens Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious PAR or ASM files. If a user is tricked to open a malicious file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Solid Edge SE2024 and recommends to update to the latest version.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-54095US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be t… | ||||
| CVE-2024-54094US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specia… | ||||
| CVE-2024-54093US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specia… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationSolid Edge SE2024
Do not open untrusted ASM files in the affected applications
- MitigationSolid Edge SE2024
Do not open untrusted PAR files in the affected applications
- MitigationSolid Edge SE2024
Do not open untrusted PAR files in the affected applications
- BehobenSolid Edge SE2024
Update to V224.0 Update 10 or later version
- BehobenSolid Edge SE2024
Update to V224.0 Update 5 or later version
- BehobenSolid Edge SE2024
Update to V224.0 Update 5 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan