PT-2024-8715 · Siemens · Solid Edge

Nafiez · Published 2024-11-12 · Updated 2026-02-19 · CVE-2024-47942

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Solid Edge SE2024 versions prior to V224.0 Update 9

Description A DLL hijacking issue has been identified, which could allow an attacker to execute arbitrary code by placing a crafted DLL file on the system. The vulnerability is related to an uncontrolled search path element.

Recommendations For versions prior to V224.0 Update 9, update to V224.0 Update 9 or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation. Avoid placing untrusted DLL files in the system to prevent potential attacks.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2024-10317

CVE-2024-47942

Affected Products

Solid Edge

References · 6

• https://cert-portal.siemens.com/productcert/html/ssa-351178.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47942 · Security Note
• https://bdu.fstec.ru/vul/2024-10317 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47942 · Vendor Advisory
• https://twitter.com/CVEnew/status/1856321743801188798 · Twitter Post
• https://t.me/cvedetector/10603 · Telegram Post