CVE-2024-54091

Published: Dec 10, 2024Modified: Oct 29, 2025

7.3

Vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format. This could allow an attacker to execute code in the context of the current process.

Affected (20)

Products: Siemens: Parasolid, Solid Edge Se2024, Solid Edge Se2025

3 products

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Siemens Parasolid	From 36.1 to 36.1.225
Siemens Parasolid	From 37.0 to 37.0.173
Siemens Solid Edge Se2024	All versions
Siemens Solid Edge Se2024	Version 224.0
Siemens Solid Edge Se2024	Version 224.0 update_00010
Siemens Solid Edge Se2024	Version 224.0 update_00011
Siemens Solid Edge Se2024	Version 224.0 update_0001
Siemens Solid Edge Se2024	Version 224.0 update_0002
Siemens Solid Edge Se2024	Version 224.0 update_0003
Siemens Solid Edge Se2024	Version 224.0 update_0004
Siemens Solid Edge Se2024	Version 224.0 update_0005
Siemens Solid Edge Se2024	Version 224.0 update_0006
Siemens Solid Edge Se2024	Version 224.0 update_0007
Siemens Solid Edge Se2024	Version 224.0 update_0008
Siemens Solid Edge Se2024	Version 224.0 update_0009
Siemens Solid Edge Se2025	All versions
Siemens Solid Edge Se2025	Version 225.0
Siemens Solid Edge Se2025	Version 225.0 update_0001
Siemens Solid Edge Se2025	Version 225.0 update_0002
Siemens Solid Edge Se2025	Version 225.0 update_0003

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://cert-portal.siemens.com/productcert/html/ssa-672923.html

Source: productcert@siemens.com

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-979056.html

Source: productcert@siemens.com

Vendor Advisory

Timeline

No history available yet.