SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim
Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-47196US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2). vsimk.exe in affected applications allows a specific tcl file to be loade… | ||||
| CVE-2024-47195US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a specific executable file to be… | ||||
| CVE-2024-47194US | high7.3 | — | ||
A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loade… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- BehobenModelSim
Update to V2024.3 or later version
https://support.sw.siemens.com/product/852852093/ - BehobenModelSim
Update to V2024.3 or later version
https://support.sw.siemens.com/product/852852093/ - BehobenModelSim
Update to V2025.2 or later version
https://support.sw.siemens.com/product/852852093/ - BehobenQuesta
Update to V2024.3 or later version
https://support.sw.siemens.com/product/852852093/ - BehobenQuesta
Update to V2024.3 or later version
https://support.sw.siemens.com/product/852852093/ - BehobenQuesta
Update to V2025.2 or later version
https://support.sw.siemens.com/product/852852093/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan