Siemens Simcenter Femap
Siemens Simcenter Femap is affected by two vulnerabilities that could be triggered when the application reads modfem files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the target host system. Siemens has released updates for Simcenter Femap and recommends to update to the latest version to fix the vulnerabilities. Siemens recommends to avoid opening of untrusted files from unknown sources.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-27399US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks pro… | ||||
| CVE-2021-27387US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks pro… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap - CSAF Versionself
- SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap - PDF Versionself
- SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap - TXT Versionself
- ICS Advisory ICSA-21-159-12 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-159-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationSimcenter Femap 2020.2
Do not open untrusted modfem files from unknown sources
- MitigationSimcenter Femap 2020.2
Do not open untrusted modfem files from unknown sources
- MitigationSimcenter Femap 2021.1
Do not open untrusted modfem files from unknown sources
- MitigationSimcenter Femap 2021.1
Do not open untrusted modfem files from unknown sources
- BehobenSimcenter Femap 2020.2
Update to V2020.2.MP3 or later version
- BehobenSimcenter Femap 2020.2
Update to V2020.2.MP3 or later version
- BehobenSimcenter Femap 2021.1
Update to V2021.1.MP3 or later version
- BehobenSimcenter Femap 2021.1
Update to V2021.1.MP3 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan