Summary
Simcenter Amesim contains a vulnerable SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process.
Siemens has released an update for Simcenter Amesim and recommends to update to the latest version.
Vulnerabilities 1
-
Critical 9.8
A vulnerability has been identified in Simcenter Amesim (All versions < V2021.1). The affected application contains a S…
Revision history
-
#1
Publication Date
References
-
SSA-386812: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-386812.html
-
SSA-386812: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-386812.pdf
-
SSA-386812: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-386812.txt