SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap
Siemens Simcenter Femap is affected by two vulnerabilities that could be triggered when the application reads modfem files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the target host system. Siemens has released updates for Simcenter Femap and recommends to update to the latest version to fix the vulnerabilities. Siemens recommends to avoid opening of untrusted files from unknown sources.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27399US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks pro… | ||||
| CVE-2021-27387US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks pro… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationSimcenter Femap 2020.2
Do not open untrusted modfem files from unknown sources
- MitigationSimcenter Femap 2020.2
Do not open untrusted modfem files from unknown sources
- MitigationSimcenter Femap 2021.1
Do not open untrusted modfem files from unknown sources
- MitigationSimcenter Femap 2021.1
Do not open untrusted modfem files from unknown sources
- FixedSimcenter Femap 2020.2
Update to V2020.2.MP3 or later version
- FixedSimcenter Femap 2020.2
Update to V2020.2.MP3 or later version
- FixedSimcenter Femap 2021.1
Update to V2021.1.MP3 or later version
- FixedSimcenter Femap 2021.1
Update to V2021.1.MP3 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan