CVE-2021-46161

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in...

CVE-2021-46160

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in...

CVE-2021-46160

Siemens Simcenter Femap is affected by CVE-2021-46160 in V2020.2 and V2021.1. The vulnerability is an out-of-bounds write (parsing NEU files) that could allow code execution in the current process. The ZDI advisory indicates exploitation requires user interaction (target must visit a malicious pa...

CVE-2021-46159

Siemens Simcenter Femap NEU file parsing vulnerabilities (CVE-2021-46159) involve an out-of-bounds write that can allow code execution in the context of the current process. Affected: Simcenter Femap v2020.2 and v2021.1 (all versions). Root cause: parsing specially crafted NEU files leads to memo...

CVE-2021-46159

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in...

CVE-2021-46158

Siemens Simcenter Femap is vulnerable to a stack-based buffer overflow while parsing NEU files in V2020.2 and V2021.1. The flaw, described in ZDI advisories (ZDI-22-311, ZDI-22-312, ZDI-22-313), allows an attacker to execute code in the context of the affected process. Exploitation requires user ...

CVE-2021-46158

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process...

CVE-2021-46157

Siemens Simcenter Femap NEU file parsing is affected by a memory corruption vulnerability in V2020.2 and V2021.1 (all versions). The flaw occurs while parsing NEU files and can allow code execution in the context of the current process. The ZDI advisory ZDI-22-310 states exploitation can be remot...

CVE-2021-46157

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a memory corruption vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process...

CVE-2021-46156

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in...

CVE-2021-46156

Siemens Simcenter Femap v2020.2 and v2021.1 are affected by an out-of-bounds write while parsing NEU files, enabling code execution in the current process. The issue stems from parsing NEU data and is detailed in ZDI-22-309, which notes user interaction is required to exploit (e.g., visiting a ma...

CVE-2021-46155

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process...

CVE-2021-46155

Siemens Simcenter Femap NEU file parsing stack-based buffer overflow (CVE-2021-46155) affects Femap V2020.2 and V2021.1. The root cause is lack of validation of user-supplied data length during NEU file parsing, copying into a stack buffer, enabling potential code execution in the process context...

CVE-2021-46154

The CVE-2021-46154 entry concerns Siemens Simcenter Femap (V2020.2 and V2021.1) with NEU file parsing vulnerabilities. Multiple connected advisories (ZDI-22-301, -302, -303, -304) describe a stack-based buffer overflow, memory corruption and out-of-bounds/read past end issues arising during NEU f...

CVE-2021-46154

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process...

CVE-2021-46153

CVE-2021-46153 affects Siemens/SIMCENTER FEMAP V2020.2 and V2021.1, with a memory corruption flaw in NEU file parsing that can lead to arbitrary code execution in the context of the current process. Public advisories (ZDI-22-300/297/298/299) describe remote code execution requiring user interacti...

CVE-2021-46153

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a memory corruption vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process...

CVE-2021-46152

Siemens Simcenter Femap (V2020.2 and V2021.1, all builds) contains a vulnerability in NEU file parsing that can cause a type confusion or out-of-bounds write, enabling arbitrary code execution in the context of the current process. Multiple ZDI advisories (ZDI-22-294/22-296 and related 22-295) in...

CVE-2021-46152

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a type confusion vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-1464...

CVE-2021-46151

Siemens Simcenter Femap NEU file parsing is affected by CVE-2021-46151. The vulnerability is an out-of-bounds write past the end of an allocated structure while parsing NEU files, caused by insufficient validation in the NEU parser. Impact is remote code execution in the context of the affected p...