CVE-2024-41981: A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All...
7.8
CVSS
Description
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process.
Classification
CVE ID: CVE-2024-41981
CVSS Base Severity: HIGH
CVSS Base Score: 7.8
Affected Products
Vendor: Siemens
Product: Simcenter Femap V2306
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://cert-portal.siemens.com/productcert/html/ssa-852501.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-881356.html