{"id":"CVE-2024-41908","state":"PUBLISHED","title":"A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT fi","description":"A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.","publishedAt":"2024-08-13T07:54:28.985Z","updatedAt":"2024-08-13T13:49:49.818Z","severity":{"score":7.3,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"siemens"},"assigner":"siemens","products":["Siemens NX"],"affected":[{"vendor":"Siemens","product":"NX","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2406.3000","versionType":"custom"}]}],"references":["https://cert-portal.siemens.com/productcert/html/ssa-357412.html"],"weaknesses":["CWE-125"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/41xxx/CVE-2024-41908.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-41908","state":"PUBLISHED","datePublished":"2024-08-13T07:54:28.985Z","dateUpdated":"2024-08-13T13:49:49.818Z","assignerShortName":"siemens","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateReserved":"2024-07-23T12:40:56.886Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process."}],"affected":[{"vendor":"Siemens","product":"NX","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2406.3000","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-357412.html"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH"}},{"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseScore":7.3,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","lang":"en","description":"CWE-125: Out-of-bounds Read","type":"CWE"}]}],"providerMetadata":{"shortName":"siemens","orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateUpdated":"2024-08-13T07:54:28.985Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"siemens","product":"nx_1988_firmware","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"2406.3000","versionType":"custom"}],"cpes":["cpe:2.3:o:siemens:nx_1957_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:siemens:nx_1961_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:siemens:nx_1965_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:siemens:nx_1969_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:siemens:nx_1984_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:siemens:nx_1988_firmware:-:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-13T13:29:47.094197Z","id":"CVE-2024-41908","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-13T13:49:49.818Z"}}]}}}