7.8

CVE-2024-54091: siemens parasolid Out-of-bounds Write

CVSS: 7.8v3.1HighAnalyzed
Published 10-12-2024Last modified 08-04-2025
Open JSON

Vulnerability summary

CVE-2024-54091 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in siemens parasolid. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.5% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 10-12-2024
    PublishedVulnerability first disclosed.
  2. 08-04-2025
    Last modifiedVulnerability information updated.

Description

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format. This could allow an attacker to execute code in the context of the current process.

CVSS metrics

4 scores · 2 sources · 2 versions

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

7%

Versus all other CVEs

30-day change

0.00 pp

From 0.18% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Siemens3 products
  • parasolid≥ 36.1, < 36.1.225 | ≥ 37.0, < 37.0.173
  • solid_edge_se2024< V224.0 Update 12 | na | 224.0 | 224.0:update_0001 | 224.0:update_00010 | 224.0:update_00011 | 224.0:update_0002 | 224.0:update_0003 | 224.0:update_0004 | 224.0:update_0005 | 224.0:update_0006 | 224.0:update_0007 | 224.0:update_0008 | 224.0:update_0009
  • solid_edge_se2025< V225.0 Update 3 | na | 225.0 | 225.0:update_0001 | 225.0:update_0002 | 225.0:update_0003

1 vendor · 3 products

References

2 links