{"id":"CVE-2024-54095","aliases":["EUVD-2024-52271","GHSA-f5vq-gp8f-87xv"],"status":"published","title":"A vulnerability has been identified in Solid Edge SE2024 (All versions \u003c V224.0 Update 10). The...","description":"A vulnerability has been identified in Solid Edge SE2024 (All versions \u003c V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.","severity":{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00165,"percentile":0.05742,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-191"],"published":"2024-12-10T13:54:21Z","modified":"2026-06-17T08:09:45Z","products":[{"vendor":"siemens","product":"solid edge se2024"},{"vendor":"siemens","product":"solid_edge_se2024"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-730188.html","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54095"},{"url":"https://github.com/advisories/GHSA-f5vq-gp8f-87xv"}],"sources":{"cve":[{"id":"CVE-2024-54095","description":"A vulnerability has been identified in Solid Edge SE2024 (All versions \u003c V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2024-12-10T13:54:21.335Z","modified":"2024-12-10T17:20:36.157Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:33:59.177173Z"}],"euvd":[{"id":"EUVD-2024-52271","description":"A vulnerability has been identified in Solid Edge SE2024 (All versions \u003c V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2024-12-10T13:54:21Z","modified":"2024-12-10T17:20:36Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-03T00:04:37.743244Z"}],"ghsa":[{"id":"GHSA-f5vq-gp8f-87xv","title":"A vulnerability has been identified in Solid Edge SE2024 (All versions \u003c V224.0 Update 10). The...","description":"A vulnerability has been identified in Solid Edge SE2024 (All versions \u003c V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2024-12-10T15:32:31Z","modified":"2024-12-10T15:32:39Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:59:06.448773Z"}],"nvd":[{"id":"CVE-2024-54095","description":"A vulnerability has been identified in Solid Edge SE2024 (All versions \u003c V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2024-12-10T14:30:47.66Z","modified":"2026-06-17T08:09:45.687Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:10:39.434419Z"}]}}