Vulnerabilities > CVE-2021-46158 - Improper Validation of Specified Quantity in Input vulnerability in Siemens Simcenter Femap 2020.2/2021.1

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
siemens
CWE-1284
NVD
Published: 2022-02-09
Updated: 2024-11-21

Summary

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15085, ZDI-CAN-15289, ZDI-CAN-15602)

Vulnerable Configurations

Part Description Count
Application
Siemens
8

Common Weakness Enumeration (CWE)

References