A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). The femap.exe application lacks proper validation of user-supplied data when parsing modfem files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-14260)
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-997732.pdf | Patch Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-1073/ | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
23 Sep 2021, 18:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-997732.pdf - Patch, Vendor Advisory | |
| References | (MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-1073/ - Third Party Advisory, VDB Entry | |
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 3.3 |
| CPE | cpe:2.3:a:siemens:simcenter_femap:2021.1:-:*:*:*:*:*:* cpe:2.3:a:siemens:simcenter_femap:2020.2:-:*:*:*:*:*:* |
15 Sep 2021, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Sep 2021, 11:42
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-14 11:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-37176
Mitre link : CVE-2021-37176
CVE.ORG link : CVE-2021-37176
JSON object : View
Products Affected
siemens
- simcenter_femap
CWE
CWE-125
Out-of-bounds Read