Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-54091

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format. This could allow an attacker to execute code in the context of the current process.

Published

2024-12-10T14:30:47.193

Last Modified

2025-10-29T14:21:57.357

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application siemens parasolid < 36.1.225 Yes
Application siemens parasolid < 37.0.173 Yes
Application siemens solid_edge_se2024 - Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2024 224.0 Yes
Application siemens solid_edge_se2025 - Yes
Application siemens solid_edge_se2025 225.0 Yes
Application siemens solid_edge_se2025 225.0 Yes
Application siemens solid_edge_se2025 225.0 Yes
Application siemens solid_edge_se2025 225.0 Yes
References