PT-2024-2690 · Parasolid · Parasolid

Published 2024-02-13 · Updated 2024-10-10 · CVE-2024-22043

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Parasolid V35.0 versions prior to V35.0.251 Parasolid V35.1 versions prior to V35.1.170

Description The issue is related to a null pointer dereference vulnerability in Parasolid while parsing specially crafted XT files. This could allow an attacker to crash the application, causing a denial of service condition.

Recommendations For Parasolid V35.0 versions prior to V35.0.251, update to version V35.0.251 or later. For Parasolid V35.1 versions prior to V35.1.170, update to version V35.1.170 or later.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-02801

CVE-2024-22043

Affected Products

Parasolid

References · 7

• https://cert-portal.siemens.com/productcert/html/ssa-797296.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22043 · Security Note
• https://osv.dev/vulnerability/CVE-2024-22043 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02801 · Security Note
• https://twitter.com/VulmonFeeds/status/1757375149420974473 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2024021533 · Note
• https://twitter.com/CVEnew/status/1757332558210076853 · Twitter Post