CVE-2024-33577

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-33577
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-064222.html
https://cert-portal.siemens.com/productcert/html/ssa-258494.html
Configurations

No configuration.

History

09 Jul 2024, 12:15

Type Values Removed Values Added
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-064222.html -
Summary
  • (es) Se ha identificado una vulnerabilidad en Simcenter Nastran 2306 (Todas las versiones), Simcenter Nastran 2312 (Todas las versiones), Simcenter Nastran 2406 (Todas las versiones &lt; V2406.90). Las aplicaciones afectadas contienen una vulnerabilidad de desbordamiento de pila al analizar cadenas especiales como argumento para uno de los archivos binarios de la aplicación. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual.
Summary (en) A vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter Nastran 2312 (All versions), Simcenter Nastran 2406 (All versions < V2406.90). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process. (en) A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.

14 May 2024, 16:17

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 16:17

Updated : 2024-07-09 12:15

NVD link : CVE-2024-33577

Mitre link : CVE-2024-33577

CVE.ORG link : CVE-2024-33577

JSON object : View

Products Affected

No product.

CWE
CWE-121

Stack-based Buffer Overflow