SSA-133038

csafDEsiemens_psirt

SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap

Advisory ansehen veröffentlicht 2021-06-08

Siemens Simcenter Femap is affected by two vulnerabilities that could be triggered when the application reads modfem files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the target host system. Siemens has released updates for Simcenter Femap and recommends to update to the latest version to fix the vulnerabilities. Siemens recommends to avoid opening of untrusted files from unknown sources.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-27399UShigh7.8—
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks pro…
CVE-2021-27387UShigh7.8—
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks pro…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • MitigationSimcenter Femap 2020.2

    Do not open untrusted modfem files from unknown sources

  • MitigationSimcenter Femap 2020.2

    Do not open untrusted modfem files from unknown sources

  • MitigationSimcenter Femap 2021.1

    Do not open untrusted modfem files from unknown sources

  • MitigationSimcenter Femap 2021.1

    Do not open untrusted modfem files from unknown sources

  • BehobenSimcenter Femap 2020.2

    Update to V2020.2.MP3 or later version

  • BehobenSimcenter Femap 2020.2

    Update to V2020.2.MP3 or later version

  • BehobenSimcenter Femap 2021.1

    Update to V2021.1.MP3 or later version

  • BehobenSimcenter Femap 2021.1

    Update to V2021.1.MP3 or later version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan