CVE-2024-47046

State
Published
Severity
7.3 High
Published
Oct 8, 2024
Updated
Dec 10, 2024
Reserved
Sep 17, 2024

Read the record on cve.org

Description

A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to memory corruption while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process.

Scores

CVSSScoreVectorSource
4.07.3 HighCVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsiemens
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsiemens

Weaknesses

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

ProductVersions
Simcenter Femap V2306Siemens
  • all versionsAffected
Simcenter Femap V2401Siemens
  • all versionsAffected
Simcenter Femap V2406Siemens
  • all versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.