PT-2024-3772 · Siemens · Simcenter Femap

CVE-2024-32058

·

Published

2024-05-14

·

Updated

2024-07-09

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Simcenter Femap versions prior to V2406
Description The issue is related to a memory corruption vulnerability while parsing specially crafted IGS files, which could allow an attacker to execute code in the context of the current process. This is due to a buffer overflow in memory.
Recommendations For versions prior to V2406, update to version V2406 or later to resolve the issue. As a temporary workaround, consider restricting the parsing of IGS files from untrusted sources until a patch is available. Avoid using the affected application to parse specially crafted IGS files until the issue is resolved.

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-04124
CVE-2024-32058
ZDI-24-457

Affected Products

Simcenter Femap