Information disclosure

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

CVE-2022-34659

The CVE-2022-34659 vulnerability affects Simcenter STAR-CCM+ (all versions) when the Power-on-Demand public license server is used. The issue is an information disclosure where applications expose the user, host, and display name of users, enabling an attacker to retrieve this data. Mitigations f...

Siemens Simcenter STAR-CCM+ 信息泄露漏洞

Simcenter STAR-CCM is a multiphysics computational fluid dynamics CFD software used to simulate products operating under real-world conditions. an information disclosure vulnerability exists in Siemens Simcenter STAR-CCM due to the use of a public license server where the affected application...

Siemens Simcenter STAR-CCM+

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Simcenter STAR-CCM+ contains an information disclosure vulnerability...

GHSA-C4MP-H3M2-H5MC Jenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity Reference

Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

Jenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity Reference

Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

Siemens Simcenter STAR-CCM Viewer Scene File Parsing Vulnerability

Simcenter STAR-CCM Viewer is a standalone scene and episode viewer for Simcenter STAR-CCM.Siemens Simcenter STAR-CCM Viewer has a security vulnerability that could be exploited by an attacker to execute code in the context of the current process...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

Memory corruption

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-24661

The CVE-2022-24661 vulnerability affects Siemens STAR-CCM+ Viewer (all versions before 2022.1). The issue is a memory corruption in starview+.exe while parsing specially crafted .SCE scene files, allowing code execution in the context of the current process. Public documentation from multiple sou...

Siemens Simcenter STAR-CCM+ 缓冲区错误漏洞

Simcenter STAR-CCM Viewer is a standalone scene and episode viewer for Simcenter STAR-CCM.Siemens Simcenter STAR-CCM Viewer has a security vulnerability that could be exploited by an attacker to execute code in the context of the current process...

Siemens Simcenter STAR-CCM+ Viewer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Viewer Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a crash,...

Simcenter STAR-CCM+ Viewer File Parsing Vulnerability

Simcenter STAR-CCM+ is a multi-physics computational fluid dynamics CFD software for simulation and Simcenter STAR-CCM+ Viewer is a lightweight viewer. The Simcenter STAR-CCM+ Viewer file parsing vulnerability can be exploited by an attacker to execute code in the context of the current process...

CVE-2021-42024

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions 2021.3.1. The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could...

CVE-2021-42024

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions 2021.3.1. The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could...

Default credentials

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions 2021.3.1. The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could...

CVE-2021-42024

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions 2021.3.1. The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could...