CVE-2022-34465CWE-125

CVE-2022-34465: vulnerability in Siemens Parasolid V33.1

Published · Updated

Follow this CVE+ Monitor Simcenter Femap+ Monitor Parasolid

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.250), Parasolid V34.1 (All versions < V34.1.233), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15420)
Affected products
Siemens · Parasolid V33.1Siemens · Parasolid V34.0Siemens · Parasolid V34.1Siemens · Simcenter Femap V2022.1Siemens · Simcenter Femap V2022.2
Related CVEs — Siemens Parasolid V33.1

In the same product, most dangerous first.

CVE-2022-46349HIGHCVE-2022-46349EPSS 0.5%CVE-2022-46347HIGHCVE-2022-46347EPSS 0.5%CVE-2022-46345HIGHCVE-2022-46345EPSS 0.3%CVE-2022-46346HIGHCVE-2022-46346EPSS 0.3%CVE-2022-46348HIGHCVE-2022-46348EPSS 0.3%CVE-2022-39156—CVE-2022-39156EPSS 0.3%