CVE-2021-46152

Siemens Simcenter Femap (V2020.2 and V2021.1, all builds) contains a vulnerability in NEU file parsing that can cause a type confusion or out-of-bounds write, enabling arbitrary code execution in the context of the current process. Multiple ZDI advisories (ZDI-22-294/22-296 and related 22-295) in...

CVE-2021-46152

A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a type confusion vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-1464...

Siemens Simcenter Femap

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Simcenter Femap Vulnerabilities: Out-of-bounds Write, Access of Resource Using Incompatible Type, Improper Restriction of Operations within the Bounds of a Memory Buffer, Stack-based Buffer Overflow 2...