ICSA-24-046-10

icsaUScisa_csaf_ot

Siemens Simcenter Femap

view advisory published 2024-02-13

Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in Catia MODEL file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Simcenter Femap and recommends to update to the latest version.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2024-27907US——
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer whi…
CVE-2024-24925UShigh7.8—
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially c…
CVE-2024-24924UShigh7.8—
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer whi…
CVE-2024-24923UShigh7.8—
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affected applications contain an out of bounds…
CVE-2024-24922UShigh7.8—
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer whi…
CVE-2024-24921UShigh7.8—
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing specially crafted Cati…
CVE-2024-24920UShigh7.8—
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer whi…
02

references

External citations — patches, advisories, analysis.

03

remediations (14)

  • MitigationSimcenter Femap

    Do not open untrusted Catia MODEL files from using Simcenter Femap

  • MitigationSimcenter Femap

    Do not open untrusted Catia MODEL files from using Simcenter Femap

  • MitigationSimcenter Femap

    Do not open untrusted Catia MODEL files from using Simcenter Femap

  • MitigationSimcenter Femap

    Do not open untrusted Catia MODEL files from using Simcenter Femap

  • MitigationSimcenter Femap

    Do not open untrusted Catia MODEL files from using Simcenter Femap

  • MitigationSimcenter Femap

    Do not open untrusted Catia MODEL files from using Simcenter Femap

  • MitigationSimcenter Femap

    Do not open untrusted Catia MODEL files from using Simcenter Femap

  • FixedSimcenter Femap

    Update to V2306.0000 or later version

    https://support.sw.siemens.com/
  • FixedSimcenter Femap

    Update to V2306.0000 or later version

    https://support.sw.siemens.com/
  • FixedSimcenter Femap

    Update to V2306.0000 or later version

    https://support.sw.siemens.com/
  • FixedSimcenter Femap

    Update to V2306.0001 or later version

    https://support.sw.siemens.com/
  • FixedSimcenter Femap

    Update to V2401.0000 or later version

    https://support.sw.siemens.com/
  • FixedSimcenter Femap

    Update to V2401.0000 or later version

    https://support.sw.siemens.com/
  • FixedSimcenter Femap

    Update to V2401.0000 or later version

    https://support.sw.siemens.com/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan