A vulnerability has been identified in Simcenter Amesim (All versions < V2021.1). The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-386812.pdf | Mitigation Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-386812.pdf | Mitigation Vendor Advisory |
Configurations
History
21 Nov 2024, 08:24
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-386812.pdf - Mitigation, Vendor Advisory |
13 Oct 2023, 18:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-386812.pdf - Mitigation, Vendor Advisory | |
| CPE | cpe:2.3:a:siemens:simcenter_amesim:*:*:*:*:*:*:*:* | |
| First Time |
Siemens simcenter Amesim
Siemens |
10 Oct 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-10 11:15
Updated : 2024-11-21 08:24
NVD link : CVE-2023-43625
Mitre link : CVE-2023-43625
CVE.ORG link : CVE-2023-43625
JSON object : View
Products Affected
siemens
- simcenter_amesim
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')