CVE-2023-41032

CVE-2023-41032 affects Siemens Parasolid (and Simcenter Femap) with multiple affected versions listed. The vulnerability is an out-of-bounds write past the end of an allocated structure while parsing X_T files, enabling code execution in the context of the current process. Affected versions inclu...

CVE-2023-41032

A vulnerability has been identified in Parasolid V34.1 All versions V34.1.258, Parasolid V35.0 All versions V35.0.253, Parasolid V35.1 All versions V35.1.184, Parasolid V36.0 All versions V36.0.142, Simcenter Femap V2301 All versions V2301.0003, Simcenter Femap V2306 All versions V2306.0001. The...

CVE-2023-41032

A vulnerability has been identified in Parasolid V34.1 All versions V34.1.258, Parasolid V35.0 All versions V35.0.253, Parasolid V35.1 All versions V35.1.184, Parasolid V36.0 All versions V36.0.142, Simcenter Femap V2301 All versions V2301.0003, Simcenter Femap V2306 All versions V2306.0001. The...

PT-2023-5461 · Siemens · Simcenter Femap +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V35.0.260 Parasolid versions prior to V35.1.246 Parasolid versions prior to V36.0.156 Simcenter Femap versions prior to V2301.0003 Simcenter Femap versions prior to V2306.0001 Description: The affected application...

PT-2023-5549 · Siemens · Simcenter Femap +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V34.1.258 Parasolid versions prior to V35.0.253 Parasolid versions prior to V35.1.184 Parasolid versions prior to V36.0.142 Simcenter Femap versions prior to V2301.0003 Simcenter Femap versions prior to V2306.0001...

CISA Releases Fifteen Industrial Control Systems Advisories

CISA released fifteen 15 Industrial Control Systems ICS advisories on February 16, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories f...

Siemens Simcenter Femap before V2023.1

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2022-39157

A vulnerability has been identified in Parasolid V34.0 All versions = V34.0.252 = V34.1.242 = V35.0.170 V35.0.184, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted XT files. This...

CVE-2022-43397

A vulnerability has been identified in Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds write past the end of an allocated buffer while...

CVE-2022-43397

A vulnerability has been identified in Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds write past the end of an allocated buffer while...

CVE-2022-39157

A vulnerability has been identified in Parasolid V34.0 All versions = V34.0.252 = V34.1.242 = V35.0.170 V35.0.184, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted XT files. This...

Design/Logic Flaw

A vulnerability has been identified in Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds write past the end of an allocated buffer while...

Design/Logic Flaw

A vulnerability has been identified in Parasolid V34.0 All versions = V34.0.252 = V34.1.242 = V35.0.170 V35.0.184, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted XT files. This...

CVE-2022-43397

A vulnerability has been identified in Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds write past the end of an allocated buffer while...

CVE-2022-39157

A vulnerability has been identified in Parasolid V34.0 All versions = V34.0.252 = V34.1.242 = V35.0.170 V35.0.184, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted XT files. This...

CVE-2022-43397

CVE-2022-43397 is an out-of-bounds write vulnerability in Siemens/Parasolid tooling. Affected products and versions include Parasolid V34.0 (prior to 34.0.252), V34.1 (prior to 34.1.242), V35.0 (prior to 35.0.170), and Simcenter Femap (prior to 2023.1). The issue arises when parsing specially cra...

CVE-2022-43397

A vulnerability has been identified in Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds write past the end of an allocated buffer while...

PT-2022-24781 · Siemens · Simcenter Femap +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V34.0.252 Parasolid versions V34.0.252 through V34.0.253 Parasolid versions prior to V34.1.242 Parasolid versions V34.1.242 through V34.1.243 Parasolid versions prior to V35.0.170 Parasolid versions V35.0.170 throu...