CVE-2024-34772

A vulnerability has been identified in Solid Edge All versions V224.0 Update 4. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

CVE-2024-34771

A vulnerability has been identified in Solid Edge All versions V224.0 Update 2. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-34771

Solid Edge CVE-2024-34771 is a heap-based buffer overflow vulnerability in PAR parsing affecting all versions prior to V224.0 Update 2. Root cause: heap overflow during PAR file handling; impact: potential code execution in the current process. Mitigation: update to V224.0 Update 2 or later (Siem...

CVE-2024-34771

A vulnerability has been identified in Solid Edge All versions V224.0 Update 2. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-33493

CVE-2024-33493 affects Solid Edge: all versions prior to V224.0 Update 5 are affected by an out-of-bounds read while parsing specially crafted PAR files, potentially allowing code execution in the current process. Connected sources corroborate the affected product/versions and describe the underl...

CVE-2024-33493

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

CVE-2024-33492

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

CVE-2024-33492

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

CVE-2024-33492

CVE-2024-33492 affects Siemens Solid Edge: all versions prior to V224.0 Update 5 are vulnerable to an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, which could allow code execution in the current process. This is one entry in a set of vulnera...

CVE-2024-33491

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

CVE-2024-33491

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

CVE-2024-33490

Solid Edge vulnerabilities CVE-2024-33490 describe an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, enabling code execution in the current process. Affected: Solid Edge versions prior to V224.0 Update 5. Root cause: out-of-bounds read during ...

CVE-2024-33490

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

CVE-2024-33490

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

CVE-2024-33489

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-33489

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-33489

CVE-2024-33489 affects Siemens Solid Edge prior to V224.0 Update 5. The issue is a heap-based buffer overflow when parsing specially crafted PAR files, which could allow code execution in the current process. Mitigation per Siemens: update to V224.0 Update 5 or newer. Other documented mitigations...

Siemens Solid Edge 安全漏洞

Siemens Solid Edge is an enterprise-class computer-aided design software for complex 3D modeling. Siemens Solid Edge suffers from a stack buffer overflow vulnerability that stems from improper memory management when the software parses specially crafted PAR files. An attacker can exploit the...

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. Siemens Solid Edge suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute cod...

PT-2024-3673 · Siemens · Siemens Solid Edge

Name of the Vulnerable Software and Affected Versions: Siemens Solid Edge versions prior to V224.0 Update 4 Description: The issue is related to an out of bounds read in memory, which can be triggered by parsing specially crafted PAR files. This could allow an attacker to execute arbitrary code i...