CVE-2024-32063 - A vulnerability has been identified in Simcenter Femap (All versions < V2406)

Back Back to CVE browser

HIGH

A vulnerability has been identified in Simcenter Femap (All versions < V2406)

Published May 14, 2024

7.3

HIGH

CVSS 4.0

EPSS 0.39%

Description

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21573)

Affected products

Vendor Siemens Product Simcenter Femap Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2406

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

Simcenter Femap

n/a

Version	Status	Constraints
0	affected	<V2406

Vendor Siemens Product PS Iges Parasolid Translator Component Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v27.1.215

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

PS Iges Parasolid Translator Component

n/a

Version	Status	Constraints
0	affected	<v27.1.215

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-843

References (3)

https://cert-portal.siemens.com/productcert/html/ssa-064222.html
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-976324.html
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-29886
Advisory

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-064222.html		Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-976324.html		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-29886		Advisory