SSA-881356: Multiple Memory Corruption Vulnerabilities in Simcenter Femap
Simcenter Femap contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Simcenter Femap V2406 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-47046US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is… | ||||
| CVE-2024-41981US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- MitigationSimcenter Femap V2306
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2306
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2401
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2401
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2406
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2406
Do not open untrusted BDF files in the affected applications
- No fix availableSimcenter Femap V2306
Currently no fix is available
- No fix availableSimcenter Femap V2306
Currently no fix is available
- No fix availableSimcenter Femap V2401
Currently no fix is available
- No fix availableSimcenter Femap V2401
Currently no fix is available
- FixedSimcenter Femap V2406
Integrate the update published under ''Femap 2406 Nastran Updates" (<https://support.sw.siemens.com/downloads/PL20240416271650117/>) applicable to all Femap 2406.x versions.
- FixedSimcenter Femap V2406
Integrate the update published under ''Femap 2406 Nastran Updates" (<https://support.sw.siemens.com/downloads/PL20240416271650117/>) applicable to all Femap 2406.x versions.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan