SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim
Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-47196US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2). vsimk.exe in affected applications allows a specific tcl file to be loade… | ||||
| CVE-2024-47195US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a specific executable file to be… | ||||
| CVE-2024-47194US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loade… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- FixedModelSim
Update to V2024.3 or later version
https://support.sw.siemens.com/product/852852093/ - FixedModelSim
Update to V2024.3 or later version
https://support.sw.siemens.com/product/852852093/ - FixedModelSim
Update to V2025.2 or later version
https://support.sw.siemens.com/product/852852093/ - FixedQuesta
Update to V2024.3 or later version
https://support.sw.siemens.com/product/852852093/ - FixedQuesta
Update to V2024.3 or later version
https://support.sw.siemens.com/product/852852093/ - FixedQuesta
Update to V2025.2 or later version
https://support.sw.siemens.com/product/852852093/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan