CVE-2024-32058

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application is vulnerable to memory corruption while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21563)

Score

CVSS 3.1 7.8 High

Status

Analyzed - productcert@siemens.com

Published

2024-05-14

Last modified

2024-08-02

Weaknesses

CWE-119

Affected products

• Ps/iges Parasolid Translator (Siemens)
• Ps Iges Parasolid Translator Component (Siemens)
• Simcenter Femap (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-064222.html
• https://cert-portal.siemens.com/productcert/html/ssa-976324.html