Vulnerability Details CVE-2024-54091
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format.
This could allow an attacker to execute code in the context of the current process.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.9%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2024-54091
-
cpe:2.3:a:siemens:parasolid:36.1
-
cpe:2.3:a:siemens:parasolid:36.1.147
-
cpe:2.3:a:siemens:parasolid:36.1.173
-
cpe:2.3:a:siemens:parasolid:36.1.185
-
cpe:2.3:a:siemens:parasolid:37.0
-
cpe:2.3:a:siemens:solid_edge_se2024:-
-
cpe:2.3:a:siemens:solid_edge_se2024:224.0
-
cpe:2.3:a:siemens:solid_edge_se2025:-
-
cpe:2.3:a:siemens:solid_edge_se2025:225.0