CVE-2022-27653

HIGH

Simcenter Femap < 2022.2 - Out-of-Bounds Write via Crafted .NEU File Parsing

Title source: llm

Description

A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15594)

References (1)

Core 1

Core References

Mitigation, Vendor Advisory x_refsource_misc

https://cert-portal.siemens.com/productcert/pdf/ssa-162616.pdf

Scores

CVSS v3 7.8

EPSS 0.0042

EPSS Percentile 61.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

siemens/simcenter_femap < 2022.2

Published May 20, 2022

Tracked Since Feb 18, 2026