CVE-2022-39146

highPriorität · verfolgen · 31EPSS 0.003 · 17. PerzentilDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.26% (17th) EPSS

CVSS 7.8 · high

Is it mine?

36 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · cisa_csaf_ot · siemens_psirt

EPSS · bewertet 2026-10-27

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted X_T files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-17502)

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenParasolid V33.1siemens_psirt
Update to V33.1.262 or later version
https://support.sw.siemens.com/
BehobenParasolid V34.0siemens_psirt
Update to V34.0.252 or later version
https://support.sw.siemens.com/
BehobenParasolid V34.1siemens_psirt
Update to V34.1.242 or later version
https://support.sw.siemens.com/
BehobenParasolid V35.0siemens_psirt
Update to V35.0.161 or later version
https://support.sw.siemens.com/
BehobenSimcenter Femap V2022.1siemens_psirt
Update to V2022.1.3 or later version
https://support.sw.siemens.com/
BehobenSimcenter Femap V2022.2siemens_psirt
Update to V2022.2.2 or later version
https://support.sw.siemens.com/
BehobenParasolid V33.1cisa_csaf_ot
Update to V33.1.262 or later version
https://support.sw.siemens.com/
BehobenParasolid V34.0cisa_csaf_ot
Update to V34.0.252 or later version
https://support.sw.siemens.com/
BehobenParasolid V34.1cisa_csaf_ot
Update to V34.1.242 or later version
https://support.sw.siemens.com/
BehobenParasolid V35.0cisa_csaf_ot
Update to V35.0.161 or later version
https://support.sw.siemens.com/
BehobenSimcenter Femap V2022.1cisa_csaf_ot
Update to V2022.1.3 or later version
https://support.sw.siemens.com/
BehobenSimcenter Femap V2022.2cisa_csaf_ot
Update to V2022.2.2 or later version
https://support.sw.siemens.com/
MitigationParasolid V33.1siemens_psirt
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationParasolid V34.0siemens_psirt
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationParasolid V34.1siemens_psirt
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationParasolid V35.0siemens_psirt
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationSimcenter Femap V2022.1siemens_psirt
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationSimcenter Femap V2022.2siemens_psirt
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationParasolid V33.1cisa_csaf_ot
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationParasolid V34.0cisa_csaf_ot
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationParasolid V34.1cisa_csaf_ot
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationParasolid V35.0cisa_csaf_ot
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationSimcenter Femap V2022.1cisa_csaf_ot
Do not open untrusted X_T files in Simcenter Femap or Parasolid
MitigationSimcenter Femap V2022.2cisa_csaf_ot
Do not open untrusted X_T files in Simcenter Femap or Parasolid

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-824USCWE-824USCWE-824US

betroffene Produkte (36)

Betroffene Produkte und Versionsbereiche.

Parasolid V33.1alle Versionencisa_csaf_otUS
Parasolid V34.0alle Versionencisa_csaf_otUS
Parasolid V34.1alle Versionencisa_csaf_otUS
Parasolid V35.0alle Versionencisa_csaf_otUS
Simcenter Femap V2022.1alle Versionencisa_csaf_otUS
Simcenter Femap V2022.2alle Versionencisa_csaf_otUS
Siemens Parasolid V33.1< V33.1.262cisa_csaf_otUS
Siemens Parasolid V33.1V33.1.262_ → V33.1.263cisa_csaf_otUS
Siemens Parasolid V34.0< V34.0.252cisa_csaf_otUS
Siemens Parasolid V34.1< V34.1.242cisa_csaf_otUS
Siemens Parasolid V35.0< V35.0.161cisa_csaf_otUS
Siemens Parasolid V35.0V35.0.161_ → V35.0.164cisa_csaf_otUS
Siemens Simcenter Femap V2022.1< V2022.1.3cisa_csaf_otUS
Siemens Simcenter Femap V2022.2< V2022.2.2cisa_csaf_otUS
Siemens Parasolid V33.1All versions → V33.1.262enisa_euvdEU
Siemens Parasolid V33.1All versions V33.1.262 → V33.1.263enisa_euvdEU
Siemens Parasolid V34.0All versions → V34.0.252enisa_euvdEU
Siemens Parasolid V34.1All versions → V34.1.242enisa_euvdEU
Siemens Parasolid V35.0All versions → V35.0.161enisa_euvdEU
Siemens Parasolid V35.0All versions V35.0.161 → V35.0.164enisa_euvdEU

20 von 36 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-518824SSA-518824 Multiple File Parsing Vulnerabilities in Simcenter Femap and Parasolid2022-09-13csaf · siemens_psirtDE
Simcenter Femap and Parasolid are affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in X_T file formats. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released updates for the affected products and recommends to update to the latest versions.
ICSA-22-258-02Siemens Simcenter Femap and Parasolid2022-09-13icsa · cisa_csaf_otUS
Simcenter Femap and Parasolid are affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in X_T file formats. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released updates for the affected products and recommends to update to the latest versions.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2022-09-13geändert 2026-06-17

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan