Siemens Simcenter STAR-CCM+ Viewer
Siemens Simcenter STAR-CCM+ Viewer is affected by a vulnerability that could be triggered when the application reads scene (.sce) files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the target host system. Siemens has released an update for Simcenter STAR-CCM+ Viewer and recommends to update to the latest version to fix the vulnerability. Siemens recommends to avoid opening of untrusted files from unknown sources.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-25665US | high7.8 | — | ||
A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1). The starview+.exe application lacks proper validation of user-supplied data when parsi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-109294: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer - CSAF Versionself
- SSA-109294: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer - PDF Versionself
- SSA-109294: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer - TXT Versionself
- ICS Advisory ICSA-21-257-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-257-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationSimcenter STAR-CCM+ Viewer
Do not open untrusted scene files from unknown sources
- BehobenSimcenter STAR-CCM+ Viewer
Update to V2021.2.1 or later version
https://community.sw.siemens.com/s/article/Simcenter-STAR-CCM-Viewer-Download
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan