Description
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21564)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Simcenter Femap | < V2406 | V2406 |
Advisories 5
- NCSC-2024-0282 Kwetsbaarheden verholpen in Siemens Producten NCSC-NL (Netherlands) · Jul 9, 2024
- ICSA-24-193-04 Siemens Simcenter Femap CISA ICS & IT advisories · Jul 9, 2024
- SSA-064222 SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 Siemens ProductCERT · Jul 9, 2024
- ICSA-24-137-08 Siemens PS/IGES Parasolid Translator Component CISA ICS & IT advisories · May 14, 2024
- SSA-976324 SSA-976324: Multiple IGS File Parsing Vulnerabilities in PS/IGES Parasolid Translator Component before V27.1.215 Siemens ProductCERT · May 14, 2024