CVE-2024-54091

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-54091
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format. This could allow an attacker to execute code in the context of the current process.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-672923.html Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-979056.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:-:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0001:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_00010:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_00011:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0002:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0003:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0004:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0005:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0006:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0007:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0008:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0009:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:225.0:-:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0001:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0002:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0003:*:*:*:*:*:*
History

29 Oct 2025, 14:21

Type Values Removed Values Added
First Time Siemens solid Edge Se2025
Siemens solid Edge Se2024
Siemens parasolid
Siemens
References () https://cert-portal.siemens.com/productcert/html/ssa-672923.html - () https://cert-portal.siemens.com/productcert/html/ssa-672923.html - Vendor Advisory
References () https://cert-portal.siemens.com/productcert/html/ssa-979056.html - () https://cert-portal.siemens.com/productcert/html/ssa-979056.html - Vendor Advisory
CPE cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0001:*:*:*:*:*:*
cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0002:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:225.0:-:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0009:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0001:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0002:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_00010:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_00011:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0006:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0007:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0005:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0008:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0004:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0003:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:-:*:*:*:*:*:*
cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_0003:*:*:*:*:*:*

08 Apr 2025, 09:15

Type Values Removed Values Added
Summary (en) A vulnerability has been identified in Parasolid V36.1 (All versions < V36.1.225), Parasolid V37.0 (All versions < V37.0.173). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format. This could allow an attacker to execute code in the context of the current process. (en) A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format. This could allow an attacker to execute code in the context of the current process.
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-672923.html -

12 Dec 2024, 14:15

Type Values Removed Values Added
Summary
  • (es) Se ha identificado una vulnerabilidad en Parasolid V36.1 (todas las versiones anteriores a V36.1.225), Parasolid V37.0 (todas las versiones anteriores a V37.0.173) y Parasolid V37.1 (todas las versiones anteriores a V37.1.109). Las aplicaciones afectadas contienen una vulnerabilidad de escritura fuera de los límites al analizar archivos PAR especialmente manipulados. Esto podría permitir que un atacante ejecute código en el contexto del proceso actual.
Summary (en) A vulnerability has been identified in Parasolid V36.1 (All versions < V36.1.225), Parasolid V37.0 (All versions < V37.0.173), Parasolid V37.1 (All versions < V37.1.109). The affected applications contain an out of bounds write vulnerability when parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. (en) A vulnerability has been identified in Parasolid V36.1 (All versions < V36.1.225), Parasolid V37.0 (All versions < V37.0.173). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format. This could allow an attacker to execute code in the context of the current process.

10 Dec 2024, 14:30

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-10 14:30

Updated : 2025-10-29 14:21

NVD link : CVE-2024-54091

Mitre link : CVE-2024-54091

CVE.ORG link : CVE-2024-54091

JSON object : View

Products Affected

siemens

  • solid_edge_se2024
  • solid_edge_se2025
  • parasolid
CWE
CWE-787

Out-of-bounds Write