CVE-2022-39156

CVSS V2 None CVSS V3 High 7.8
Description
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application is vulnerable to out of bounds read past the end of an allocated buffer when parsing X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-18196)
Overview
  • CVE ID
  • CVE-2022-39156
  • Assigner
  • productcert@siemens.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-09-13T10:15:12
  • Last Modified Date
  • 2022-09-13T15:11:58
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:* 1 OR 2022.1 2022.1.3
cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:* 1 OR 2022.2 2022.2.2
cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:* 1 OR 33.1 33.1.262
cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:* 1 OR 34.0 34.0.252
cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:* 1 OR 34.1 34.1.242
cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:* 1 OR 35.0 35.0.164
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • Attack Vector
  • LOCAL
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • REQUIRED
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 7.8
  • Base Severity
  • HIGH
  • Exploitability Score
  • 1.8
  • Impact Score
  • 5.9
References
History
Created Old Value New Value Data Type Notes
2022-09-13 11:00:05 Added to TrackCVE