Summary
Simcenter Femap and Parasolid are affected by an out of bounds read
vulnerability that could be triggered when the application reads files
in NEU format. If a user is tricked to open a malicious file with the
affected applications, an attacker could leverage the vulnerability to
perform remote code execution in the context of the current process.
Siemens has released updates for the affected products and recommends
to update to the latest versions.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.…
Revision history
-
#3
Added fix for Simcenter Femap version lines V2022.1 and V2022.2
-
#2
Added fix for Parasolid version line V33.1
-
#1
Publication Date
References
-
SSA-243317 File Parsing Vulnerability in Simcenter Femap and Parasolid - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-243317.pdf
-
SSA-243317 File Parsing Vulnerability in Simcenter Femap and Parasolid - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-243317.txt