Siemens Questa and ModelSim
Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-47196US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2). vsimk.exe in affected applications allows a specific tcl file to be loade… | ||||
| CVE-2024-47195US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a specific executable file to be… | ||||
| CVE-2024-47194US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loade… | ||||
references
External citations — patches, advisories, analysis.
- SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3 - CSAF Versionself
- SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3 - HTML Versionself
- ICS Advisory ICSA-24-284-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-284-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationModelSim
Harden the application server to prevent local access by untrusted personnel
- MitigationModelSim
Harden the application server to prevent local access by untrusted personnel
- MitigationModelSim
Harden the application server to prevent local access by untrusted personnel
- MitigationQuesta
Harden the application server to prevent local access by untrusted personnel
- MitigationQuesta
Harden the application server to prevent local access by untrusted personnel
- MitigationQuesta
Harden the application server to prevent local access by untrusted personnel
- FixedModelSim
Update to V2024.3 or later version
- FixedModelSim
Update to V2024.3 or later version
- FixedModelSim
Update to V2024.3 or later version
- FixedQuesta
Update to V2024.3 or later version
- FixedQuesta
Update to V2024.3 or later version
- FixedQuesta
Update to V2024.3 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan