SSA-852501: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000
Simcenter Nastran contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Simcenter Nastran 2406 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-47046US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is… | ||||
| CVE-2024-41981US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- MitigationSimcenter Nastran 2306
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2306
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2312
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2312
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2406
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2406
Do not open untrusted BDF files in the affected applications
- No fix availableSimcenter Nastran 2306
Currently no fix is available
- No fix availableSimcenter Nastran 2306
Currently no fix is available
- No fix availableSimcenter Nastran 2312
Currently no fix is available
- No fix availableSimcenter Nastran 2312
Currently no fix is available
- FixedSimcenter Nastran 2406
Update to V2406.5000 or later version
https://support.sw.siemens.com/ - FixedSimcenter Nastran 2406
Update to V2406.5000 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan