CVE-2022-39154: High severity siemens simcenter femap vulnerability
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted XT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-18188)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-39154?
The severity of CVE-2022-39154 is high, with a severity value of 7.8.
What software is affected by CVE-2022-39154?
Siemens Simcenter Femap versions 2022.1.3 and earlier, Siemens Parasolid versions 33.1.263, 34.0.252, 34.1.242, and 35.0.164 and earlier.
How can I fix CVE-2022-39154?
Apply the latest security patches provided by Siemens for Simcenter Femap and Parasolid.
Where can I find more information about CVE-2022-39154?
You can find more information about CVE-2022-39154 in the Siemens ProductCERT advisory at the following link: [Siemens ProductCERT Advisory](https://cert-portal.siemens.com/productcert/pdf/ssa-518824.pdf).
What is the CWE ID of CVE-2022-39154?
The CWE ID of CVE-2022-39154 is 787.