CVE-2022-39141: High severity siemens simcenter femap vulnerability
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application is vulnerable to out of bounds read past the end of an allocated buffer when parsing XT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-17296)
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-39141?
CVE-2022-39141 is a vulnerability identified in Siemens Parasolid and Simcenter Femap software versions.
What is the severity of CVE-2022-39141?
The severity of CVE-2022-39141 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2022-39141?
CVE-2022-39141 affects Siemens Parasolid versions 33.1-35.0 and Simcenter Femap versions 2022.1-2022.2.
How can I fix CVE-2022-39141?
To fix CVE-2022-39141, update your Siemens Parasolid or Simcenter Femap software to versions 33.1.262+, 34.0.252+, 34.1.242+, 35.0.161+, 2022.1.3+, or 2022.2.2+.
Where can I find more information about CVE-2022-39141?
You can find more information about CVE-2022-39141 at the following reference link: [https://cert-portal.siemens.com/productcert/pdf/ssa-518824.pdf](https://cert-portal.siemens.com/productcert/pdf/ssa-518824.pdf).