Description
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format.
This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Solid Edge SE2024 | < V224.0 Update 12 | V224.0 Update 12 |
| Siemens | Solid Edge SE2025 | < V225.0 Update 3 | V225.0 Update 3 |
Advisories 5
- ICSA-25-100-03 Siemens Solid Edge CISA ICS & IT advisories · May 6, 2025
- ICSA-24-347-04 Siemens Parasolid CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0106 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Apr 8, 2025
- SSA-672923 SSA-672923: Out of Bounds Write Vulnerability in Solid Edge Siemens ProductCERT · Apr 8, 2025
- SSA-979056 SSA-979056: Out of Bounds Write Vulnerability in Parasolid Siemens ProductCERT · Dec 12, 2024