SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406
Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in IGS, BDF or BMP file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Simcenter Femap and recommends to update to the latest version.
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-33654US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-33653US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32056US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains an out of bounds write past the end of an allocated buffer while pa… | ||||
| CVE-2024-33577US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stack overflow vulnerability while parsing specially strings as a… | ||||
| CVE-2024-32066US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32065US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32064US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32063US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could… | ||||
| CVE-2024-32062US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could… | ||||
| CVE-2024-32061US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32060US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32059US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32058US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application is vulnerable to memory corruption while parsing specially crafted IGS files… | ||||
| CVE-2024-32057US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could… | ||||
| CVE-2024-32055US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
references
External citations — patches, advisories, analysis.
- SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 - CSAF Versionself
- SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 - HTML Versionself
- SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 - PDF Versionself
- SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 - TXT Versionself
remediations (30)
- MitigationSimcenter Femap
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted BMP files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted BMP files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - FixedSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan