Siemens NX

🗓️ 13 Aug 2024 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

As of January 10, 2023, CISA will no longer update ICS security advisories for Siemens NX vulnerabilities beyond the initial advisory. Out-of-bounds read vulnerability in Siemens NX prior to V2406.3000 allows an attacker to crash the application or execute code

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-41908	13 Aug 202411:15	–	circl
CNVD	Siemens NX Out-of-Bounds Read Vulnerability	14 Aug 202400:00	–	cnvd
CVE	CVE-2024-41908	13 Aug 202407:54	–	cve
Cvelist	CVE-2024-41908	13 Aug 202407:54	–	cvelist
EUVD	EUVD-2024-39266	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	13 Aug 202409:21	–	ncsc
NVD	CVE-2024-41908	13 Aug 202408:15	–	nvd
Positive Technologies	PT-2024-29626 · Siemens · Siemens Nx	13 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-41908	9 Jan 202608:34	–	redhatcve
Vulnrichment	CVE-2024-41908	13 Aug 202407:54	–	vulnrichment

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-357412.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-357412.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-228-09.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-228-09
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

13 Aug 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 47.3

CVSS 3.17.8

EPSS0.00182

SSVC