SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406
Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in IGS, BDF or BMP file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Simcenter Femap and recommends to update to the latest version.
beschreibt (15)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-33654US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-33653US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32056US | high7.8 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains an out of bounds write past the end of an allocated buffer while pa… | ||||
| CVE-2024-33577US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stack overflow vulnerability while parsing specially strings as a… | ||||
| CVE-2024-32066US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32065US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32064US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32063US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could… | ||||
| CVE-2024-32062US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could… | ||||
| CVE-2024-32061US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32060US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32059US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
| CVE-2024-32058US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application is vulnerable to memory corruption while parsing specially crafted IGS files… | ||||
| CVE-2024-32057US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could… | ||||
| CVE-2024-32055US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 - CSAF Versionself
- SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 - HTML Versionself
- SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 - PDF Versionself
- SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 - TXT Versionself
Behebungen (30)
- MitigationSimcenter Femap
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted BMP files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted BMP files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- MitigationSimcenter Femap
Do not open untrusted IGS files in the affected applications
- BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap
Update to V2406 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan