PT-2024-32475

Name of the Vulnerable Software and Affected Versions ModelSim versions prior to V2024.3 Questa versions prior to V2024.3 Description A vulnerability has been identified that allows an authenticated local attacker to inject arbitrary code and escalate privileges. This occurs when vsimk.exe in...

PT-2024-32474

Name of the Vulnerable Software and Affected Versions ModelSim versions prior to V2024.3 Questa versions prior to V2024.3 Description A vulnerability has been identified that allows an authenticated local attacker to inject arbitrary code and escalate privileges. This occurs when gdb.exe in...

PT-2024-7987

Name of the Vulnerable Software and Affected Versions ModelSim versions prior to V2024.3 Questa versions prior to V2024.3 Description A vulnerability has been identified in the vish2.exe file of the affected applications, allowing a specific DLL file to be loaded from the current working director...

CVE-2024-47194: Uncontrolled Search Path Element

A vulnerability has been identified in ModelSim All versions V2024.3, Questa All versions V2024.3. vish2.exe in affected applications allows a specific DLL file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate...

Siemens ModelSim 代码问题漏洞

Questa and ModelSim simulators are used worldwide for simulating, debugging and verifying integrated circuit designs, among other things. An uncontrolled search path element vulnerability exists in Siemens Questa and ModelSim, which can be exploited by an authenticated, local attacker to inject...

Siemens Questa and ModelSim

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

ModelSim Simulation and Questa Simulation Underprotected Credential Vulnerability

Questa and ModelSim simulators are used worldwide to simulate, debug, and verify integrated circuit designs, etc. ModelSim Simulation and Questa Simulation do not protect sufficient credentials, and the RSA white-box implementation in the affected application does not adequately protect the...

Siemens Questa and ModelSim

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Questa Simulation and ModelSim Simulation Vulnerability: Insufficiently Protected Credentials 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original advisory titled...

CVE-2021-42023

A vulnerability has been identified in ModelSim Simulation All versions, Questa Simulation All versions. The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property IP data in accordance...

CVE-2021-42023

A vulnerability has been identified in ModelSim Simulation All versions, Questa Simulation All versions. The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property IP data in accordance...

Design/Logic Flaw

A vulnerability has been identified in ModelSim Simulation All versions, Questa Simulation All versions. The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property IP data in accordance...

CVE-2021-42023: Insufficiently Protected Credentials

A vulnerability has been identified in ModelSim Simulation All versions, Questa Simulation All versions. The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property IP data in accordance...

ModelSim Simulation 安全漏洞

Questa and ModelSim simulators are used worldwide to simulate, debug, and verify integrated circuit designs, etc. ModelSim Simulation and Questa Simulation do not protect sufficient credentials, and the RSA white-box implementation in the affected application does not adequately protect the...

CVE-2021-42023

The CVE-2021-42023 entry covers Siemens ModelSim Simulation and Questa Simulation (all versions) where the RSA white-box implementation does not sufficiently protect built‑in private keys used to decrypt IP data per IEEE 1735. The underlying issue is insufficiently protected credentials (CWE-522)...

PT-2021-23474

Name of the Vulnerable Software and Affected Versions ModelSim Simulation all versions Questa Simulation all versions Description A vulnerability has been identified that affects the RSA white-box implementation in the affected applications. This vulnerability insufficiently protects the built-in...