CVE-2024-54095: siemens solid_edge_se2024 Integer Underflow (Wrap or Wraparound)

Vulnerability summary

CVE-2024-54095 is a high (CVSS 7.8) Integer Underflow (Wrap or Wraparound) vulnerability in siemens solid_edge_se2024. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.3% of scored vulnerabilities.

Timeline

1. 10-12-2024
   PublishedVulnerability first disclosed.
2. 10-12-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

• CWE-191Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.