A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
CVE ID: CVE-2024-54094
CVSS Base Severity: HIGH
CVSS Base Score: 7.8
Vendor: Siemens
Product: Solid Edge SE2024
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 24.23% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)