Description
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Solid Edge SE2024 | < V224.0 Update 10 | V224.0 Update 10 |
Advisories 3
- NCSC-2024-0473 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 10, 2024
- ICSA-24-347-07 Siemens Solid Edge SE2024 CISA ICS & IT advisories · Dec 10, 2024
- SSA-730188 SSA-730188: Multiple File Parsing Vulnerabilities in Solid Edge V2024 Siemens ProductCERT · Dec 10, 2024