CVE-2024-54093 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-54093 PUBLISHED CVSS 7.800000190734863 HIGH

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted ASM files. This could allow an attacker to execute code in the context of the current process.

EPSS 0.12% · 31.2th percentile

Risk Scores

CVSS v3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.12%

31.2th percentile

Affected Products

Vendor	Product	Versions
Siemens	Solid Edge SE2024	0
siemens	solid_edge_se2024	0, 224.0, 224.0

Timeline

Dec 10, 2024 CVE Published
Dec 10, 2024 CVE Updated
Dec 10, 2024 PoC Published
Dec 11, 2024 EPSS Score
Dec 12, 2024 PoC Published
Dec 27, 2024 EPSS Score
Jan 12, 2025 EPSS Score
Jan 29, 2025 EPSS Score
Feb 14, 2025 EPSS Score
Mar 2, 2025 EPSS Score
Mar 15, 2025 Coalition ESS Score
Mar 18, 2025 EPSS Score

References

Open in Interactive Console →