ICSA-21-350-13

icsaUScisa_csaf_ot

Siemens Questa and ModelSim

Advisory ansehen veröffentlicht 2021-12-16

Successful exploitation of this vulnerability could allow access to unencrypted data.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-42023USmedium6.5Exploit
A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions). The RSA white-box implementation in affected applications insufficientl…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationModelSim Simulation

    Companies that deliver encrypted design IP data to their customers: Ensure procedural and contractual measures are in place that minimize the risk of unauthorized access to the data.

  • MitigationQuesta Simulation

    Companies that deliver encrypted design IP data to their customers: Ensure procedural and contractual measures are in place that minimize the risk of unauthorized access to the data.

  • BehobenModelSim Simulation

    Siemens recommends upgrading to the lastest version of the following product, login is required: ModelSim Simulation new releases.

    https://support.sw.siemens.com/en-US/product/852852093/
  • BehobenQuesta Simulation

    Siemens recommends upgrading to the lastest version of the following product, login is required: Questa Simulation new releases.

    https://support.sw.siemens.com/en-US/product/852852103/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan