Siemens Questa and ModelSim
Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-47196US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2). vsimk.exe in affected applications allows a specific tcl file to be loade… | ||||
| CVE-2024-47195US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a specific executable file to be… | ||||
| CVE-2024-47194US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loade… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3 - CSAF Versionself
- SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3 - HTML Versionself
- ICS Advisory ICSA-24-284-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-284-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- MitigationModelSim
Harden the application server to prevent local access by untrusted personnel
- MitigationModelSim
Harden the application server to prevent local access by untrusted personnel
- MitigationModelSim
Harden the application server to prevent local access by untrusted personnel
- MitigationQuesta
Harden the application server to prevent local access by untrusted personnel
- MitigationQuesta
Harden the application server to prevent local access by untrusted personnel
- MitigationQuesta
Harden the application server to prevent local access by untrusted personnel
- BehobenModelSim
Update to V2024.3 or later version
- BehobenModelSim
Update to V2024.3 or later version
- BehobenModelSim
Update to V2024.3 or later version
- BehobenQuesta
Update to V2024.3 or later version
- BehobenQuesta
Update to V2024.3 or later version
- BehobenQuesta
Update to V2024.3 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan