CVE-2024-54091: High severity siemens solid edge vulnerability
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing XT data or a specially crafted file in XT format. This could allow an attacker to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54091?
CVE-2024-54091 has been classified as a high severity vulnerability due to the potential for exploitation via specially crafted X_T files.
How do I fix CVE-2024-54091?
To fix CVE-2024-54091, update Siemens Parasolid to version 36.1.225 or 37.0.173 or later.
What versions of Siemens Parasolid are affected by CVE-2024-54091?
CVE-2024-54091 affects all versions of Siemens Parasolid prior to 36.1.225 and 37.0.173.
What types of attacks can exploit CVE-2024-54091?
Attackers can exploit CVE-2024-54091 by crafting malicious X_T files that trigger an out-of-bounds write.
Is CVE-2024-54091 resolved in recent patches?
Yes, CVE-2024-54091 has been resolved in patches released with versions 36.1.225 and 37.0.173 of Siemens Parasolid.