Siemens Simcenter Nastran
Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string as a file argument. If a user is tricked to run one of the impacted application binary with a malicious string, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released a new version for Simcenter Nastran 2406 and recommends to update to the latest version. Siemens recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-33577US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stack overflow vulnerability while parsing specially strings as a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90 - CSAF Versionself
- SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90 - HTML Versionself
- SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90 - PDF Versionself
- SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90 - TXT Versionself
- ICS Advisory ICSA-24-137-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-137-05 - Web Versionself
- Recommended Practicesexternal
Behebungen (3)
- Kein Fix geplantSimcenter Nastran 2306
Currently no fix is planned
- Kein Fix geplantSimcenter Nastran 2312
Currently no fix is planned
- BehobenSimcenter Nastran 2406
Update to V2406.90 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan