Lucene search

K
cvelistSiemensCVELIST:CVE-2022-39137
HistorySep 13, 2022 - 9:40 a.m.

CVE-2022-39137

2022-09-1309:40:54
CWE-125
siemens
www.cve.org
7
vulnerability
parasolid
simcenter femap
out of bounds read
x_t files
information leakage
allocated buffer
cve-2022-39137

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

17.8%

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application is vulnerable to out of bounds read past the end of an allocated buffer when parsing X_T files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-17276)

CNA Affected

[
  {
    "product": "Parasolid V33.1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V33.1.262"
      }
    ]
  },
  {
    "product": "Parasolid V34.0",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V34.0.252"
      }
    ]
  },
  {
    "product": "Parasolid V34.1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V34.1.242"
      }
    ]
  },
  {
    "product": "Parasolid V35.0",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions <  V35.0.161"
      }
    ]
  },
  {
    "product": "Simcenter Femap V2022.1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2022.1.3"
      }
    ]
  },
  {
    "product": "Simcenter Femap V2022.2",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2022.2.2"
      }
    ]
  }
]

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

17.8%

Related for CVELIST:CVE-2022-39137