SSA-000072: Multiple File Parsing Vulnerabilities in Simcenter Femap
Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in Catia MODEL file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Simcenter Femap and recommends to update to the latest version.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-27907US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer whi… | ||||
| CVE-2024-24925US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially c… | ||||
| CVE-2024-24924US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer whi… | ||||
| CVE-2024-24923US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affected applications contain an out of bounds… | ||||
| CVE-2024-24922US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer whi… | ||||
| CVE-2024-24921US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing specially crafted Cati… | ||||
| CVE-2024-24920US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer whi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-000072: Multiple File Parsing Vulnerabilities in Simcenter Femap - CSAF Versionself
- SSA-000072: Multiple File Parsing Vulnerabilities in Simcenter Femap - HTML Versionself
- SSA-000072: Multiple File Parsing Vulnerabilities in Simcenter Femap - PDF Versionself
- SSA-000072: Multiple File Parsing Vulnerabilities in Simcenter Femap - TXT Versionself
Behebungen (14)
- MitigationSimcenter Femap
Do not open untrusted Catia MODEL files from using Simcenter Femap
- MitigationSimcenter Femap
Do not open untrusted Catia MODEL files from using Simcenter Femap
- MitigationSimcenter Femap
Do not open untrusted Catia MODEL files from using Simcenter Femap
- MitigationSimcenter Femap
Do not open untrusted Catia MODEL files from using Simcenter Femap
- MitigationSimcenter Femap
Do not open untrusted Catia MODEL files from using Simcenter Femap
- MitigationSimcenter Femap
Do not open untrusted Catia MODEL files from using Simcenter Femap
- MitigationSimcenter Femap
Do not open untrusted Catia MODEL files from using Simcenter Femap
- BehobenSimcenter Femap
Update to V2306.0000 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2306.0000 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2306.0000 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2306.0001 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2401.0000 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2401.0000 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2401.0000 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan