CVE-2024-47942

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Nov 12, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-479439.8The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch CVE-2024-479446.8The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leadCVE-2024-479459.8The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are prCVE-2024-479467.2If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with inCVE-2024-479474.7Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of otherCVE-2024-479487.5In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backupsCVE-2024-479497.5In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary locationCVE-2024-47958.8A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknoCVE-2024-479505.4In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settingsCVE-2024-479515.4In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settingsCVE-2024-47968.8A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This affects an unknown parCVE-2024-479627.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based b