CVE-2022-34465

CVE-2022-34465 affects Siemens Parasolid and Simcenter Femap. The vulnerability is an out-of-bounds read when parsing NEU files, allowing code execution in the context of the current process. Affected products/versions: Parasolid v33.1 (before 33.1.264), v34.0 (before 34.0.250), v34.1 (before 34....

CVE-2021-46155

Siemens Simcenter Femap NEU file parsing stack-based buffer overflow (CVE-2021-46155) affects Femap V2020.2 and V2021.1. The root cause is lack of validation of user-supplied data length during NEU file parsing, copying into a stack buffer, enabling potential code execution in the process context...

CVE-2022-28662

CVE-2022-28662 affects Siemens/Semap? Simcenter Femap, with all versions prior to 2022.1.2 vulnerable due to an out-of-bounds write past the end of an allocated buffer while parsing specially crafted .NEU files. The issue could allow an attacker to leak information within the current process cont...

CVE-2022-39141

CVE-2022-39141 relates to an out-of-bounds read when parsing X_T files in Siemens Parasolid and Simcenter Femap. Affected versions: Parasolid before V33.1.262, before V34.0.252, before V34.1.242, before V35.0.161; Simcenter Femap before V2022.1.3 and before V2022.2.2. Root cause: out-of-bounds re...

CVE-2024-24920

Siemens Simcenter Femap versions before V2401.0000 are affected by an out-of-bounds write when parsing a Catia MODEL file, allowing potential code execution in the current process (CVE-2024-24920; ZDI-CAN-21710). Affected product: Simcenter Femap; vulnerable component/file parsing Catia MODEL. Im...

CVE-2021-46157

Siemens Simcenter Femap NEU file parsing is affected by a memory corruption vulnerability in V2020.2 and V2021.1 (all versions). The flaw occurs while parsing NEU files and can allow code execution in the context of the current process. The ZDI advisory ZDI-22-310 states exploitation can be remot...

CVE-2021-46162

CVE-2021-46162 affects Siemens/Siemens Simcenter Femap (all versions

CVE-2021-46156

Siemens Simcenter Femap v2020.2 and v2021.1 are affected by an out-of-bounds write while parsing NEU files, enabling code execution in the current process. The issue stems from parsing NEU data and is detailed in ZDI-22-309, which notes user interaction is required to exploit (e.g., visiting a ma...

CVE-2024-24924

Siemens Simcenter Femap is affected by CVE-2024-24924 (all versions

CVE-2022-28661

Siemens Simcenter Femap (all versions

CVE-2021-46699

Siemens Simcenter Femap is affected by CVE-2021-46699 (and related CVEs) in all versions prior to 2022.1.1. The issue is a stack-based buffer overflow in the BDF file parser caused by insufficient validation of the length of user-supplied data before copying to a stack buffer, enabling code execu...

CVE-2022-28663

Siemens Simcenter Femap is affected by CVE-2022-28663 in all versions prior to 2022.1.2. The vulnerability is an out-of-bounds write past the end of an allocated structure while parsing specially crafted NEU files, which could allow code execution in the context of the current process. Affected c...

CVE-2024-24921

Siemens Simcenter Femap is affected by CVE-2024-24921 in all versions prior to V2401.0000. The issue is a memory corruption flaw triggered while parsing specially crafted Catia MODEL files, enabling code execution in the current process context (ZDI-CAN-21712). Mitigation per the sources is to up...

CVE-2024-27907

The CVE affects Simcenter Femap prior to V2306.0000, where parsing a Catia MODEL file can trigger an out-of-bounds write past an allocated buffer, enabling code execution in the affected process. Root cause is a memory/buffer handling issue during Catia MODEL file parsing. Public references corro...

CVE-2024-24922

CVE-2024-24922 affects Siemens Simcenter Femap prior to version V2401.0000. The vulnerability is an out-of-bounds write past the end of an allocated buffer while parsing a Catia MODEL file, enabling code execution in the current process context (ZDI-CAN-21715). The issue is addressed by updating ...

CVE-2024-24923

Summary of CVE-2024-24923 (Siemens Simcenter Femap): Affects Simcenter Femap with the following vulnerable versions: all < V2401.0000 and all

CVE-2021-46154

The CVE-2021-46154 entry concerns Siemens Simcenter Femap (V2020.2 and V2021.1) with NEU file parsing vulnerabilities. Multiple connected advisories (ZDI-22-301, -302, -303, -304) describe a stack-based buffer overflow, memory corruption and out-of-bounds/read past end issues arising during NEU f...

CVE-2021-46161

Siemens Simcenter Femap v2020.2 and v2021.1 are affected by CVE-2021-46161 due to an out-of-bounds write when parsing NEU files, enabling code execution in the current process (ZDI-22-316). The root cause is a memory corruption/invalid write during NEU file handling. Affected versions: Simcenter ...

CVE-2024-24925

CVE-2024-24925 affects Siemens Simcenter Femap (all versions prior to V2306.0000). The vulnerability is an uninitialized pointer access while parsing specially crafted Catia MODEL files, which could allow code execution in the context of the current process. Multiple sources corroborate the issue...

CVE-2022-39140

The CVE-2022-39140 entry applies to Siemens Parasolid and Simcenter Femap. Affected versions suffer an out-of-bounds write past the end of an allocated buffer while parsing X_T files, enabling code execution in the current process context. Vulnerable products include Parasolid V33.1 (< V33.1.2...

CVE-2022-39156

CVE-2022-39156 details an out-of-bounds read when parsing X_T files in Parasolid and Simcenter Femap. Affected: Parasolid V33.1 (<262; 262–263 also affected for CVE-2022-39156), V34.0 (<252), V34.1 (<242), V35.0 (<161) and V35.0.161–164; Simcenter Femap V2022.1 (<3) and V2022.2 (

CVE-2022-39148

CVE-2022-39148 affects Siemens Parasolid and related Simcenter Femap components. The vulnerability is an out-of-bounds write past the end of an allocated buffer while parsing X_T files, potentially enabling code execution in the affected process. Affected products/versions include: Parasolid V33....

CVE-2022-39138

The CVE-2022-39138 entry affects Siemens Parasolid and Simcenter Femap. Affected components are Parasolid V33.1 (all versions before 33.1.262), V34.0 (before 34.0.252), V34.1 (before 34.1.242), V35.0 (before 35.0.161) and Simcenter Femap V2022.1 (before 2022.1.3) and V2022.2 (before 2022.2.2). Th...

CVE-2022-27653

Siemens Simcenter Femap is affected by CVE-2022-27653 (all versions before v2022.2). The flaw is an out-of-bounds write when parsing specially crafted .NEU files, potentially enabling code execution in the current process. Exploitation was described by ZDI as remote code execution requiring user ...

CVE-2022-34748

Siemens Simcenter Femap (all versions before 2022.2) is affected by CVE-2022-34748 due to an out-of-bounds write while parsing X_T files. The underlying issue is a write past the end of an allocated structure, enabling code execution in the context of the current process. ZDI’s advisory indicates...

CVE-2022-39151

The CVE-2022-39151 entry affects Siemens Parasolid and Simcenter Femap components (Parasolid V33.1, V34.0, V34.1, V35.0; Simcenter Femap V2022.1 and V2022.2) with an out-of-bounds write past the end of an allocated buffer while parsing X_T files. Root cause is an out-of-bounds write during parsin...

CVE-2022-39155

The CVE-2022-39155 entry affects Siemens Parasolid and Simcenter Femap. The vulnerability is an out-of-bounds write past the end of an allocated buffer during parsing of X_T files, which can execute code in the context of the current process (local access required). Affected product/version range...

CVE-2021-46153

CVE-2021-46153 affects Siemens/SIMCENTER FEMAP V2020.2 and V2021.1, with a memory corruption flaw in NEU file parsing that can lead to arbitrary code execution in the context of the current process. Public advisories (ZDI-22-300/297/298/299) describe remote code execution requiring user interacti...

CVE-2021-46151

Siemens Simcenter Femap NEU file parsing is affected by CVE-2021-46151. The vulnerability is an out-of-bounds write past the end of an allocated structure while parsing NEU files, caused by insufficient validation in the NEU parser. Impact is remote code execution in the context of the affected p...

CVE-2022-39152

CVE-2022-39152 concerns Siemens/Parasolid and Simcenter Femap. Affected are Parasolid versions: V33.1 — all < V33.1.262 and V33.1.262–V33.1.263; V34.0 — all < V34.0.252; V34.1 — all < V34.1.242; V35.0 — all < V35.0.161 and V35.0.161–V35.0.164; Simcenter Femap V2022.1 — all < V2022....

CVE-2024-32065

CVE-2024-32065 affects Siemens/Siemens Simcenter Femap (versions prior to V2406). The vulnerability is an out-of-bounds read past the end of an allocated structure while parsing specially crafted IGS files, which could allow code execution in the current process. Affected in Simcenter Femap

CVE-2022-39153

CVE-2022-39153 affects Siemens Parasolid and Simcenter Femap: Out-of-bounds read past the end of an allocated buffer when parsing X_T files, enabling possible code execution in the process context. Affected versions include: Parasolid V33.1 (=262 and <263), V34.0 (<252), V34.1 (<242), V3...

CVE-2022-39144

CVE-2022-39144 affects Siemens Parasolid and Simcenter Femap. The vulnerability is an out-of-bounds write past the end of an allocated buffer while parsing X_T files, potentially allowing code execution in the current process. Affected products/versions include Parasolid V33.1 (before 33.1.263 an...

CVE-2022-39145

CVE-2022-39145 affects Siemens Parasolid (V33.1, V34.0, V34.1, V35.0) and Simcenter Femap (V2022.1, V2022.2). The vulnerability is an out-of-bounds read when parsing X_T files, enabling potential code execution in the compromised process. Affected ranges include Parasolid V33.1 prior to 263, V34....

CVE-2022-39154

Summary (CVE-2022-39154) : Siemens Parasolid and Simcenter Femap are affected by an out-of-bounds write past the end of an allocated buffer when parsing specially crafted X_T files, enabling potential code execution in the current process. Affected products/versions include Parasolid V33.1 (prior...

CVE-2021-46160

Siemens Simcenter Femap is affected by CVE-2021-46160 in V2020.2 and V2021.1. The vulnerability is an out-of-bounds write (parsing NEU files) that could allow code execution in the current process. The ZDI advisory indicates exploitation requires user interaction (target must visit a malicious pa...

CVE-2024-32058

Summary (CVE-2024-32058): Siemens/Simcenter Femap prior to V2406 is affected by a memory corruption vulnerability when parsing crafted IGS files, potentially enabling code execution in the current process. The issue is caused by memory corruption in the parser (buffer/memory handling) for IGS inp...

CVE-2021-46159

Siemens Simcenter Femap NEU file parsing vulnerabilities (CVE-2021-46159) involve an out-of-bounds write that can allow code execution in the context of the current process. Affected: Simcenter Femap v2020.2 and v2021.1 (all versions). Root cause: parsing specially crafted NEU files leads to memo...

CVE-2022-39147

Summary (CVE-2022-39147) : Siemens Parasolid and Simcenter Femap are affected by an uninitialized pointer access vulnerability while parsing X_T files, enabling code execution in the context of the current process. Affected products/versions include Parasolid V33.1 (pre-262 and 262–263 ranges), V...

CVE-2024-33653

Summary: CVE-2024-33653 affects Siemens/Siemens Simcenter Femap versions prior to V2406. The vulnerability is an out-of-bounds memory access during parsing of BMP/related files, enabling code execution in the context of the current process. The issue is rooted in reading past the end of allocated...

CVE-2024-32059

CVE-2024-32059 concerns an out-of-bounds read past the end of an allocated structure during parsing of IGS files in Siemens/Simcenter Femap. Affected products are Simcenter Femap versions prior to V2406; the vulnerability can allow code execution in the context of the current process. The issue i...

CVE-2022-39142

CVE-2022-39142 affects Siemens Parasolid and Simcenter Femap. The vulnerability is an out-of-bounds write past the end of an allocated buffer during parsing of X_T files, potentially allowing code execution in the affected process. Affected products/versions include Parasolid v33.1 (pre-263), v34...

CVE-2022-39143

CVE-2022-39143 affects Siemens Parasolid and Simcenter Femap. The vulnerability is an out-of-bounds write past the end of an allocated buffer while parsing X_T files, enabling code execution in the context of the affected process. Affected products/versions include: Parasolid: V33.1 (all versions...

CVE-2022-39150

CVE-2022-39150 affects Siemens Parasolid and Simcenter Femap. The flaw is an out-of-bounds write past the end of an allocated buffer when parsing specially crafted X_T files, potentially allowing code execution in the context of the affected process. Affected products/versions include: Parasolid ...

CVE-2024-32055

CVE-2024-32055 – Simcenter Femap is affected in all versions prior to V2406. The vulnerability is an out-of-bounds read past the end of an allocated structure while parsing specially crafted IGS files, which could allow an attacker to execute code in the context of the current process. Affected p...

CVE-2024-32056

CVE-2024-32056 affects Siemens Simcenter Femap prior to version V2406, with an out-of-bounds write past the end of an allocated buffer while parsing IGS part files. The vulnerability can allow code execution in the current process context. Affected product is Simcenter Femap; root cause is memory...

CVE-2021-46152

Siemens Simcenter Femap (V2020.2 and V2021.1, all builds) contains a vulnerability in NEU file parsing that can cause a type confusion or out-of-bounds write, enabling arbitrary code execution in the context of the current process. Multiple ZDI advisories (ZDI-22-294/22-296 and related 22-295) in...

CVE-2022-39139

The CVE-2022-39139 issue affects Siemens Parasolid and Simcenter Femap spanning V33.1, V34.0, V34.1, and V35.0 (and V2022.1/V2022.2 for Femap) with an out-of-bounds write while parsing crafted X_T files, permitting code execution in the affected process. Affected versions and implications are con...

CVE-2022-39149

Summary of CVE-2022-39149 : Siemens Parasolid and Simcenter Femap are affected by an out-of-bounds write past the end of an allocated buffer while parsing specially crafted X_T files, potentially enabling code execution in the affected process. Affected products/versions include: Parasolid V33.1 ...

CVE-2021-37176

CVE-2021-37176 affects Siemens/Siemens Simcenter Femap V2020.2 (All versions) and V2021.1 (All versions). The femap.exe parser for MODFEM files fails to validate user-supplied data, causing an out-of-bounds read past the end of an allocated buffer and enabling information disclosure in the contex...