Summary
A security research [1] identified weaknesses in the IEEE 1735 recommended practice for encryption of Design IP, which could allow a sophisticated attacker access to unencrypted Design IP data in IEEE 1735-compliant products. This advisory addresses the specific details for the affected Siemens software products: Questa and ModelSim simulators.
Siemens is preparing updates and recommends specific countermeasures for Questa and ModelSim.
Vulnerabilities 1
-
Unscored —CVE-2021-42023 Public exploit
A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions). The RSA wh…
Revision history
-
#2
Added significant changes implemented in latest product version 2022.4
-
#1
Publication Date
References
-
SSA-400332: Insufficient Design IP Protection in IEEE 1735 Recommended Practice - Impact to Questa and ModelSim - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-400332.pdf
-
SSA-400332: Insufficient Design IP Protection in IEEE 1735 Recommended Practice - Impact to Questa and ModelSim - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-400332.txt