A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions). The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property (IP) data in accordance with the IEEE 1735 recommended practice. This could allow a sophisticated attacker to discover the keys, bypassing the protection intended by the IEEE 1735 recommended practice.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-400332.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Dec 2021, 20:14
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 6.5 |
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-400332.pdf - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:siemens:modelsim:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:questa:*:*:*:*:*:*:*:* |
14 Dec 2021, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-522 | |
| Summary | A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions). The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property (IP) data in accordance with the IEEE 1735 recommended practice. This could allow a sophisticated attacker to discover the keys, bypassing the protection intended by the IEEE 1735 recommended practice. |
14 Dec 2021, 12:28
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-14 12:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-42023
Mitre link : CVE-2021-42023
CVE.ORG link : CVE-2021-42023
JSON object : View
Products Affected
siemens
- modelsim
- questa
CWE
CWE-522
Insufficiently Protected Credentials