CVE-2024-47940

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Nov 12, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-479417.8A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of boundCVE-2024-479427.3A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijacCVE-2024-479439.8The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch CVE-2024-479446.8The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leadCVE-2024-479459.8The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are prCVE-2024-479467.2If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with inCVE-2024-479474.7Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of otherCVE-2024-479487.5In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backupsCVE-2024-479497.5In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary locationCVE-2024-47958.8A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknoCVE-2024-479505.4In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settingsCVE-2024-479515.4In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings