CVE-2024-54095
At a glance Severity HIGH 7.3 EPSS EPSS 0.17 % · percentile 6 (2026-10-27) State PUBLISHED Published 2024-12-10 Updated 2024-12-10 Assigner siemens NVD status Analyzed Description A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
Scores Version Score Vector Scored by CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H siemens CVSS 4.0 HIGH 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N siemens CVSS 4.0 HIGH 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X NVD · productcert@siemens.com (Secondary) CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H NVD · productcert@siemens.com (Secondary)
Weaknesses (CWE)
European references
Affected configurations (NVD CPE) cpe:2.3:a:siemens:solid_edge_se2024:*:*:*:*:*:*:*:* < 224.0cpe:2.3:a:siemens:solid_edge_se2024:224.0:-:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0001:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0002:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0003:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0004:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0005:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0006:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0007:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0008:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0009:*:*:*:*:*:*Affected products
References
Sources
