Lucene search

China National Vulnerability DatabaseCNVD-2024-09313

HistoryFeb 21, 2024 - 12:00 a.m.

Siemens Parasolid Out-of-Bounds Read Vulnerability (CNVD-2024-09313)

2024-02-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

siemens

parasolid

out-of-bounds read

vulnerability

exploit

code execution

process context

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.7%

JSON

Parasolid is a 3D geometry modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/table modeling. Siemens Parasolid suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current process.

CPENameOperatorVersion
siemens parasolidlt35.0.263
siemens parasolidlt35.1.252
siemens parasolidlt36.0.198

Name	Operator	Version
siemens parasolid	lt	35.0.263
siemens parasolid	lt	35.1.252
siemens parasolid	lt	36.0.198

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.7%

JSON

Related for CNVD-2024-09313