Solid Edge Se2024
Monthly
Out-of-bounds read in Siemens Solid Edge SE2024 before V224.0 Update 14 and SE2025 before V225.0 Update 6 can crash the application or potentially allow code execution in the context of the current process when an attacker supplies a specially crafted PRT file. Exploitation requires a user to open the malicious CAD file locally, with high attack complexity and passive user interaction, so exposure is limited to environments that open untrusted or externally sourced part files. No public exploit code has been identified at time of analysis, and EPSS is very low (0.14%, 3rd percentile), though the vendor has published fixed updates.
Out-of-bounds read in Siemens Solid Edge SE2024 (before V224.0 Update 14) and SE2025 (before V225.0 Update 6) can crash the application or potentially allow code execution when a user opens a specially crafted PRT file. Exploitation requires the victim to open an attacker-supplied file locally; there is no network-triggerable path, and mandatory user interaction plus high attack complexity reduce practical risk. No public exploit was identified at time of analysis, and EPSS is 0.14%, making this a moderate-severity but low-urgency issue despite its 7.3 CVSS 4.0 score.
Out-of-bounds write in Siemens Solid Edge SE2024 and SE2025 PRT-file parsing lets a crafted part file crash the application or execute code in the context of the user who opens it. Affected installations are SE2024 versions before V224.0 Update 14 and SE2025 versions before V225.0 Update 6; exploitation requires local file delivery and user interaction with high attack complexity, and no public exploit identified at time of analysis. EPSS is 0.14% (3rd percentile), a low score consistent with a moderate-priority issue rather than active widespread exploitation.
Out-of-bounds write in Siemens Solid Edge's .PRT part-file parser allows an attacker who convinces a user to open a specially crafted part file to crash the application or execute code in the context of the current process, giving access to whatever the logged-in engineer can reach - design data and the workstation itself. Only SE2024 builds below V224.0 Update 14 and SE2025 builds below V225.0 Update 6 are affected; no privileges are required (PR:N) but the attack is file-based and local, demands a high degree of crafting precision (AC:H), and depends on the victim opening the supplied file. No public exploit code or active exploitation has been identified at time of analysis, and EPSS is 0.14% (3rd percentile), consistent with a targeted, socially-delivered file-parsing flaw rather than a broadly exploited one.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). Rated high severity (CVSS 7.0), this vulnerability is low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 4). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Out-of-bounds read in Siemens Solid Edge SE2024 before V224.0 Update 14 and SE2025 before V225.0 Update 6 can crash the application or potentially allow code execution in the context of the current process when an attacker supplies a specially crafted PRT file. Exploitation requires a user to open the malicious CAD file locally, with high attack complexity and passive user interaction, so exposure is limited to environments that open untrusted or externally sourced part files. No public exploit code has been identified at time of analysis, and EPSS is very low (0.14%, 3rd percentile), though the vendor has published fixed updates.
Out-of-bounds read in Siemens Solid Edge SE2024 (before V224.0 Update 14) and SE2025 (before V225.0 Update 6) can crash the application or potentially allow code execution when a user opens a specially crafted PRT file. Exploitation requires the victim to open an attacker-supplied file locally; there is no network-triggerable path, and mandatory user interaction plus high attack complexity reduce practical risk. No public exploit was identified at time of analysis, and EPSS is 0.14%, making this a moderate-severity but low-urgency issue despite its 7.3 CVSS 4.0 score.
Out-of-bounds write in Siemens Solid Edge SE2024 and SE2025 PRT-file parsing lets a crafted part file crash the application or execute code in the context of the user who opens it. Affected installations are SE2024 versions before V224.0 Update 14 and SE2025 versions before V225.0 Update 6; exploitation requires local file delivery and user interaction with high attack complexity, and no public exploit identified at time of analysis. EPSS is 0.14% (3rd percentile), a low score consistent with a moderate-priority issue rather than active widespread exploitation.
Out-of-bounds write in Siemens Solid Edge's .PRT part-file parser allows an attacker who convinces a user to open a specially crafted part file to crash the application or execute code in the context of the current process, giving access to whatever the logged-in engineer can reach - design data and the workstation itself. Only SE2024 builds below V224.0 Update 14 and SE2025 builds below V225.0 Update 6 are affected; no privileges are required (PR:N) but the attack is file-based and local, demands a high degree of crafting precision (AC:H), and depends on the victim opening the supplied file. No public exploit code or active exploitation has been identified at time of analysis, and EPSS is 0.14% (3rd percentile), consistent with a targeted, socially-delivered file-parsing flaw rather than a broadly exploited one.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). Rated high severity (CVSS 7.0), this vulnerability is low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 4). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.