Siemens Simcenter Femap
Simcenter Femap contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Simcenter Femap V2406 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-47046US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is… | ||||
| CVE-2024-41981US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-881356: Multiple Memory Corruption Vulnerabilities in Simcenter Femap - CSAF Versionself
- SSA-881356: Multiple Memory Corruption Vulnerabilities in Simcenter Femap - HTML Versionself
- ICS Advisory ICSA-24-347-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-347-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- MitigationSimcenter Femap V2306
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2306
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2401
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2401
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2406
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap V2406
Do not open untrusted BDF files in the affected applications
- Kein Fix verfügbarSimcenter Femap V2306
Currently no fix is available
- Kein Fix verfügbarSimcenter Femap V2306
Currently no fix is available
- Kein Fix verfügbarSimcenter Femap V2401
Currently no fix is available
- Kein Fix verfügbarSimcenter Femap V2401
Currently no fix is available
- BehobenSimcenter Femap V2406
Integrate the update published under ''Femap 2406 Nastran Updates" (<https://support.sw.siemens.com/downloads/PL20240416271650117/>) applicable to all Femap 2406.x versions.
- BehobenSimcenter Femap V2406
Integrate the update published under ''Femap 2406 Nastran Updates" (<https://support.sw.siemens.com/downloads/PL20240416271650117/>) applicable to all Femap 2406.x versions.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan