CVE-2021-42023

The CVE-2021-42023 entry covers Siemens ModelSim Simulation and Questa Simulation (all versions) where the RSA white-box implementation does not sufficiently protect built‑in private keys used to decrypt IP data per IEEE 1735. The underlying issue is insufficiently protected credentials (CWE-522)...

CVE-2024-47194

Summary (CVE-2024-47194) : Siemens Questa and ModelSim are affected up to versions prior to V2024.3. The vulnerability arises because the vish2.exe launcher can load a DLL from the current working directory, enabling an authenticated local attacker to execute arbitrary code and escalate privilege...

CVE-2024-47196

CVE-2024-47196 affects Siemens Questa and ModelSim (ModelSim all versions before V2024.3; Questa before V2024.3). The vulnerability arises from vsimk.exe loading a specific TCL file from the current working directory, enabling an authenticated local attacker to inject arbitrary code and escalate ...

CVE-2024-47195

CVE-2024-47195 affects Siemens Questa and ModelSim (all versions prior to V2024.3). The issue is an Uncontrolled Search Path Element that allows a local attacker to load a crafted file from the current working directory, enabling arbitrary code execution and privilege escalation when gdb.exe is l...

CVE-2024-53977

Siemens ModelSim (all versions < V2025.1) and Questa (all versions