CVE-2024-47941
highpriority · track · 0EPSS 0.002 · 6 %ileDEEUNLRUUSEPSS · scored 2026-10-26
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSolid Edge SE2024siemens_psirt
Update to V224.0 Update 9 or later version
- FixedSolid Edge SE2024cisa_csaf_ot
Update to V224.0 Update 9 or later version
- MitigationSolid Edge SE2024siemens_psirt
Do not open untrusted PAR files in affected applications
- MitigationSolid Edge SE2024cisa_csaf_ot
Do not open untrusted PAR files in affected applications
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.4–7.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (7)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- NCSC-2024-0433Kwetsbaarheden verholpen in Siemens productenNL2024-11-12csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDCOM, SCALANCE, SIMATIC en SINEC.
- SSA-351178SSA-351178: Multiple Vulnerabilities in Solid Edge Before SE2024 Update 92024-11-12csaf · siemens_psirtDE
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or PSM format, and by a DLL hijacking vulnerability. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a new version for Solid Edge SE2024 and recommends to update to the latest version.
- ICSA-24-319-05Siemens Solid Edge2024-11-12icsa · cisa_csaf_otUS
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or PSM format, and by a DLL hijacking vulnerability. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a new version for Solid Edge SE2024 and recommends to update to the latest version.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (3)
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan