CVE-2022-34465

State: Published
Severity: Not scored
Published: Jul 12, 2022
Updated: Aug 3, 2024
Reserved: Jun 24, 2022

Description

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.250), Parasolid V34.1 (All versions < V34.1.233), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15420)

Scores

The record has no CVSS score.

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
Parasolid V33.1Siemens	All versions < V33.1.264Affected
Parasolid V34.0Siemens	All versions < V34.0.250Affected
Parasolid V34.1Siemens	All versions < V34.1.233Affected
Simcenter Femap V2022.1Siemens	All versions < V2022.1.3Affected
Simcenter Femap V2022.2Siemens	All versions < V2022.2.2Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-243317.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.