Description
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Solid Edge SE2024 | < V224.0 Update 5 | V224.0 Update 5 |
Advisories 3
- NCSC-2024-0473 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 10, 2024
- ICSA-24-347-07 Siemens Solid Edge SE2024 CISA ICS & IT advisories · Dec 10, 2024
- SSA-730188 SSA-730188: Multiple File Parsing Vulnerabilities in Solid Edge V2024 Siemens ProductCERT · Dec 10, 2024