Analysis Summary

CVE-2024-26275 CVSS:7.8

Siemens Parasolid could allow a local attacker to execute arbitrary code on the system, caused by an out of bounds read flaw. By parsing a specially crafted X_T files, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-26276 CVSS:5.3

Siemens Parasolid is vulnerable to a denial of service, caused by a stack exhaustion vulnerability. By parsing specially crafted X_T files, a local attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-26277 CVSS:3.3

Siemens Parasolid is vulnerable to a denial of service, caused by a NULL pointer dereference vulnerability. By parsing specially crafted X_T files, a local attacker could exploit this vulnerability to cause a denial of service.

CVE-2023-50821 CVSS:6.2

Siemens SIMATIC WinCC is vulnerable to a denial of service, caused by improper input validation in the login dialog box. By sending a specially crafted input, a local attacker could exploit this vulnerability to cause a denial of service.