CVE-2021-46155

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14683, ZDI-CAN-15283, ZDI-CAN-15303, ZDI-CAN-15593)

Score

CVSS 3.1 7.8 High

Status

Modified - productcert@siemens.com

Published

2022-02-09

Last modified

2024-08-04

Weaknesses

CWE-121, CWE-787

Affected products

• Simcenter Femap (Siemens)
• Simcenter Femap V2020.2 (Siemens)
• Simcenter Femap V2021.1 (Siemens)

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf
• https://www.zerodayinitiative.com/advisories/ZDI-22-305/
• https://www.zerodayinitiative.com/advisories/ZDI-22-306/
• https://www.zerodayinitiative.com/advisories/ZDI-22-307/
• https://www.zerodayinitiative.com/advisories/ZDI-22-308/