SSA-976324

csafDEsiemens_psirt

SSA-976324: Multiple IGS File Parsing Vulnerabilities in PS/IGES Parasolid Translator Component before V27.1.215

view advisory published 2024-05-14

PS/IGES Parasolid Translator Component contains multiple file parsing vulnerabilities that could be triggered when the application reads files in IGS file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for PS/IGES Parasolid Translator Component and recommends to update to the latest version.

01

describes (11)

Related CVEs.

IDseverity exploitable
CVE-2024-32066US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while…
CVE-2024-32065US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while…
CVE-2024-32064US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while…
CVE-2024-32063US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could…
CVE-2024-32062US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could…
CVE-2024-32061US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while…
CVE-2024-32060US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while…
CVE-2024-32059US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while…
CVE-2024-32058US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application is vulnerable to memory corruption while parsing specially crafted IGS files…
CVE-2024-32057US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could…
CVE-2024-32055US——
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while…
02

references

External citations — patches, advisories, analysis.

03

remediations (22)

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • MitigationPS/IGES Parasolid Translator Component

    Do not open untrusted IGS files from using PS/IGES Parasolid Translator Component

  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
  • FixedPS/IGES Parasolid Translator Component

    Update to V27.1.215 or later version

    https://ftp-cambridge.ugs.com
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan