Siemens Simcenter Femap

🗓️ 13 Feb 2024 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 25 Views

Siemens Simcenter Femap advisory for multiple vulnerabilities. CISA will no longer update ICS security advisories for Siemens products after January 10, 2023

Reporter	Title	Published	Views	Family All 75
BDU FSTEC	The vulnerability of the simulation application for complex systems, Simcenter Femap, related to writing beyond the buffer boundaries, allows a intruder to execute arbitrary code.	27 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Simcenter Femap simulation application, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code.	6 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Simcenter Femap simulation application, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.	6 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Simcenter Femap simulation application, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.	6 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the simulation application for complex systems, Simcenter Femap, arises from the use of an uninitialized pointer, allowing a perpetrator to execute arbitrary code.	6 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Simcenter Femap simulation application, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.	10 Apr 202400:00	–	bdu_fstec
CNNVD	Siemens Simcenter Femap 缓冲区错误漏洞	13 Feb 202400:00	–	cnnvd
CNNVD	Siemens Simcenter Femap 缓冲区错误漏洞	13 Feb 202400:00	–	cnnvd
CNNVD	Siemens Simcenter Femap 安全漏洞	13 Feb 202400:00	–	cnnvd
CNNVD	Siemens Simcenter Femap 缓冲区错误漏洞	13 Feb 202400:00	–	cnnvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-000072.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-000072.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-000072.pdf
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-000072.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-046-10.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-046-10
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

13 Feb 2024 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.8

EPSS0.00095

SSVC