← Back to CVEs
CVE-2021-46151
HIGH7.8
Description
A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14754, ZDI-CAN-15082)
CVE Details
CVSS v3.1 Score7.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
Published2/9/2022
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
siemens:simcenter_femap
Weaknesses (CWE)
CWE-787CWE-787
References
https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf(productcert@siemens.com)
https://www.zerodayinitiative.com/advisories/ZDI-22-291/(productcert@siemens.com)
https://www.zerodayinitiative.com/advisories/ZDI-22-292/(productcert@siemens.com)
https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf(af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-22-291/(af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-22-292/(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.