Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.8
CVSSv3

CVE-2022-39157

Published: 08/11/2022 Updated: 07/11/2023
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Siemens

Vulnerability Summary

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34.0.252 < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V34.1 (All versions >= V34.1.242 < V34.1.244), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.0 (All versions >= V35.0.170 < V35.0.184), Simcenter Femap (All versions < V2023.1). The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an malicious user to execute code in the context of the current process. (ZDI-CAN-17745)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

siemens parasolid

ICS Advisories

Siemens Simcenter Femap before V2023.1
Critical Infrastructure Sectors: Critical Manufacturing
Siemens Parasolid
Critical Infrastructure Sectors: Critical Manufacturing

References

CWE-125https://cert-portal.siemens.com/productcert/pdf/ssa-853037.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-565356.pdfhttps://nvd.nist.govhttps://www.cisa.gov/uscert/ics/advisories/icsa-23-047-06
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook