CVEvulnerability
CVE-2024-33577
7.3 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 7.3 HIGH — CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-121
Description
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.
Affected configurations
• siemens simcenter femap (< 2406.0000)
• siemens simcenter nastran (>= 2306.0 < 2406.90)
Related
Weakness · CWE (1)
- CWE-121 Stack-based Buffer Overflow weakness
References
- https://cert-portal.siemens.com/productcert/html/ssa-064222.html Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-258494.html Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-064222.html Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-258494.html Vendor Advisory