Description
A vulnerability has been identified in Simcenter STAR-CCM+ (All versions < V2306). The affected application improperly assigns file permissions to installation folders.
This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Simcenter STAR-CCM+ | All versions < V2306 | — |
Advisories 2
- ICSA-22-349-07 Siemens Simcenter STAR-CCM+ CISA ICS & IT advisories · May 6, 2025
- SSA-930100 SSA-930100: Privilege Escalation Vulnerability in Simcenter STAR-CCM+ Siemens ProductCERT · Jul 11, 2023