CVE-2022-28663

Siemens Simcenter Femap is affected by CVE-2022-28663 in all versions prior to 2022.1.2. The vulnerability is an out-of-bounds write past the end of an allocated structure while parsing specially crafted NEU files, which could allow code execution in the context of the current process. Affected c...

Siemens Simcenter Femap

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Simcenter Femap Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1...