Siemens Questa and ModelSim
view advisory published 2025-02-11
Questa and ModelSim (incl. OEM Editions) are affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-53977US | high7.8 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions < V2025.1). An example setup script contained in affected applications allows a speci… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-637914: Local Code Execution Vulnerability in Questa and ModelSim Before V2025.1 - CSAF Versionself
- SSA-637914: Local Code Execution Vulnerability in Questa and ModelSim Before V2025.1 - HTML Versionself
- ICS Advisory ICSA-25-044-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-044-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedModelSim
Update to V2025.1 or later version
- FixedQuesta
Update to V2025.1 or later version
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan