CVE-2022-39146: High severity siemens simcenter femap vulnerability

Q: What is the severity of CVE-2022-39146?

The severity of CVE-2022-39146 is high with a CVSS score of 7.8.

Q: How does CVE-2022-39146 affect Siemens Simcenter Femap?

CVE-2022-39146 affects Siemens Simcenter Femap versions between 2022.1.3 and 2022.2.2.

Q: How does CVE-2022-39146 affect Siemens Parasolid?

CVE-2022-39146 affects Siemens Parasolid versions between 33.1 and 34.1.

Q: Is there a fix available for CVE-2022-39146?

Yes, a fix is available. Please refer to the provided reference for more details.

Published Sep 13, 2022

Updated

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted XT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-17502)

Affected Software

6 affected components

Siemens Simcenter Femap>=2022.1<2022.1.3

Siemens Simcenter Femap>=2022.2<2022.2.2

Siemens Parasolid>=33.1<33.1.263

Siemens Parasolid>=34.0<34.0.252

Siemens Parasolid>=34.1<34.1.242

Siemens Parasolid>=35.0<35.0.164

Event History

Sep 13, 2022

CVE Published

via MITRE·09:41 AM

Data Sourced

via MITRE·09:41 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-39146?

The severity of CVE-2022-39146 is high with a CVSS score of 7.8.

How does CVE-2022-39146 affect Siemens Simcenter Femap?

CVE-2022-39146 affects Siemens Simcenter Femap versions between 2022.1.3 and 2022.2.2.

How does CVE-2022-39146 affect Siemens Parasolid?