Siemens Questa and ModelSim
Advisory ansehen veröffentlicht 2025-02-11
Questa and ModelSim (incl. OEM Editions) are affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-53977US | high7.8 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions < V2025.1). An example setup script contained in affected applications allows a speci… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-637914: Local Code Execution Vulnerability in Questa and ModelSim Before V2025.1 - CSAF Versionself
- SSA-637914: Local Code Execution Vulnerability in Questa and ModelSim Before V2025.1 - HTML Versionself
- ICS Advisory ICSA-25-044-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-044-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenModelSim
Update to V2025.1 or later version
- BehobenQuesta
Update to V2025.1 or later version
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan