Out of Bounds Write Vulnerability in Parasolid and Simcenter Femap Products
CVE-2023-41033

7.8HIGH

Key Information:

Vendor

Siemens
Status
Parasolid V35.0
Parasolid V35.1
Parasolid V36.0
Simcenter Femap V2301
Vendor
CVE Published:
12 September 2023

What is CVE-2023-41033?

A significant vulnerability has been discovered in several versions of Siemens' Parasolid and Simcenter Femap software. This flaw enables an out of bounds write condition when processing specially crafted X_T files, which can lead to unauthorized code execution. All versions of Parasolid and Simcenter Femap prior to the specified updates are susceptible. It is imperative for users of these products to apply the necessary updates to mitigate potential security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Parasolid V35.0 All versions < V35.0.260

Parasolid V35.1 All versions < V35.1.246

Parasolid V36.0 All versions < V36.0.156

References

https://cert-portal.siemens.com/productcert/pdf/ssa-19083...
https://cert-portal.siemens.com/productcert/pdf/ssa-88712...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.