Medium SSA-426509 3 CVEs

SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim

Published Oct 8, 2024 · Updated Jun 17, 2025 · Revision 2

Vendor: Siemens Product: ModelSim Product: Questa

Summary

Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

Medium 6.7

CVE-2024-47194

A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in…

Siemens Questa ModelSim ICS / OT

Oct 8, 2024
Medium 6.7

CVE-2024-47195

A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in a…

Siemens Questa ModelSim ICS / OT

Oct 8, 2024
Medium 6.7

CVE-2024-47196

A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2). vsimk.exe in…

Siemens ModelSim Questa ICS / OT

Oct 8, 2024

Revision history

2025-06-17 #2
Updated fix version information for CVE-2024-47196, as this vulnerability was only fixed in V2025.2 or later
2024-10-08 #1
Publication Date

References

SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-426509.html