SSA-852501: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000
Simcenter Nastran contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Simcenter Nastran 2406 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-47046US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is… | ||||
| CVE-2024-41981US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (12)
- MitigationSimcenter Nastran 2306
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2306
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2312
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2312
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2406
Do not open untrusted BDF files in the affected applications
- MitigationSimcenter Nastran 2406
Do not open untrusted BDF files in the affected applications
- Kein Fix verfügbarSimcenter Nastran 2306
Currently no fix is available
- Kein Fix verfügbarSimcenter Nastran 2306
Currently no fix is available
- Kein Fix verfügbarSimcenter Nastran 2312
Currently no fix is available
- Kein Fix verfügbarSimcenter Nastran 2312
Currently no fix is available
- BehobenSimcenter Nastran 2406
Update to V2406.5000 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Nastran 2406
Update to V2406.5000 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan