ICSA-21-350-13

icsaUScisa_csaf_ot

Siemens Questa and ModelSim

view advisory published 2021-12-16

Successful exploitation of this vulnerability could allow access to unencrypted data.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-42023USmedium6.5Exploit
A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions). The RSA white-box implementation in affected applications insufficientl…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationModelSim Simulation

    Companies that deliver encrypted design IP data to their customers: Ensure procedural and contractual measures are in place that minimize the risk of unauthorized access to the data.

  • MitigationQuesta Simulation

    Companies that deliver encrypted design IP data to their customers: Ensure procedural and contractual measures are in place that minimize the risk of unauthorized access to the data.

  • FixedModelSim Simulation

    Siemens recommends upgrading to the lastest version of the following product, login is required: ModelSim Simulation new releases.

    https://support.sw.siemens.com/en-US/product/852852093/
  • FixedQuesta Simulation

    Siemens recommends upgrading to the lastest version of the following product, login is required: Questa Simulation new releases.

    https://support.sw.siemens.com/en-US/product/852852103/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan