CVE-2024-47940: Siemens Solid Edge SE2024 RCE Vulnerability

CVE-2024-47940 Overview

CVE-2024-47940 is an out-of-bounds read vulnerability in Siemens Solid Edge SE2024, affecting all versions prior to V224.0 Update 9. The flaw resides in the PSM file parsing logic and reads memory past the end of an allocated structure. An attacker who convinces a user to open a crafted .psm file can execute code in the context of the Solid Edge process. The issue is tracked under [CWE-125] and documented in Siemens Security Advisory SSA-351178.

Critical Impact
Successful exploitation allows arbitrary code execution in the context of the current user, potentially leading to compromise of engineering workstations that handle CAD assets.

Affected Products

Siemens Solid Edge SE2024 — all versions before V224.0 Update 9
CPE: cpe:2.3:a:siemens:solid_edge_se2024:*:*:*:*:*:*:*:*
File format affected: Solid Edge PSM (part model) files

Discovery Timeline

2024-11-12 - CVE-2024-47940 published to NVD
2026-06-17 - Last updated in NVD database

Technical Details for CVE-2024-47940

Vulnerability Analysis

The vulnerability is an out-of-bounds read [CWE-125] that occurs while Solid Edge SE2024 parses specially crafted PSM files. The parser reads beyond the end of an allocated structure, exposing adjacent memory and, under the right conditions, enabling attacker-controlled code execution in the process context.

Because Solid Edge runs on engineering workstations with access to sensitive design data, exploitation can lead to intellectual property theft, lateral movement within manufacturing environments, and disruption of CAD workflows. Siemens has published fixed builds in SSA-351178.

Root Cause

The root cause is missing or incorrect bounds validation when the PSM parser dereferences fields inside an allocated structure. When a crafted file supplies values that push read operations past the structure's end, the parser accesses out-of-bounds memory. In combination with attacker-influenced content in adjacent memory, this can be leveraged to redirect control flow.

Attack Vector

Exploitation requires local user interaction. An attacker delivers a malicious .psm file through email, a shared network location, a compromised project package, or a vendor-supplied CAD asset. When a Solid Edge user opens the file, the parser processes the crafted structure and triggers the out-of-bounds read. No elevated privileges are needed; code executes in the context of the user running Solid Edge.

No public proof-of-concept exploit is available, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The EPSS score is 0.165%.

No verified exploitation code is available for this vulnerability. Refer to the Siemens Security Advisory SSA-351178 for vendor technical details.

Detection Methods for CVE-2024-47940

Indicators of Compromise

Unexpected crashes of Edge.exe or related Solid Edge processes shortly after a .psm file is opened.
Solid Edge processes spawning child processes such as cmd.exe, powershell.exe, or rundll32.exe.
.psm files arriving from untrusted external sources, especially via email attachments or unmanaged file shares.
Outbound network connections initiated by Solid Edge processes following the opening of a CAD file.

Detection Strategies

Monitor endpoint telemetry for anomalous behavior of Solid Edge binaries, including memory access violations and unexpected module loads.
Alert on child-process creation from Solid Edge that deviates from normal engineering workflows.
Inspect email gateways and file-sharing platforms for .psm attachments originating outside trusted supplier networks.

Monitoring Recommendations

Enable process, file, and network telemetry on engineering workstations running Solid Edge SE2024.
Track Solid Edge version inventories and flag hosts running builds earlier than V224.0 Update 9.
Correlate CAD file opens with subsequent process and network activity to surface exploitation attempts.

How to Mitigate CVE-2024-47940

Immediate Actions Required

Upgrade Solid Edge SE2024 to V224.0 Update 9 or later on all engineering workstations.
Restrict opening of .psm files to those received from verified, trusted sources.
Educate CAD users on the risk of opening unsolicited or unexpected part-model files.

Patch Information

Siemens has released Solid Edge SE2024 V224.0 Update 9, which addresses the out-of-bounds read in the PSM parser. Full details, download links, and additional guidance are provided in Siemens Security Advisory SSA-351178.

Workarounds

Only open PSM files received from trusted sources; block untrusted CAD file exchanges at the gateway.
Apply application-level policies that restrict Solid Edge from spawning shell or scripting interpreters.
Segment engineering workstations from general-purpose corporate networks to limit post-exploitation movement.

bash

# Example: block .psm attachments at an email gateway (pseudo-rule)
rule block_untrusted_psm {
    match  attachment.extension == "psm"
    where  sender.domain NOT IN trusted_supplier_domains
    action quarantine
}