A vulnerability has been identified in Simcenter Amesim (All versions < V2021.1). The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-386812.pdf | Mitigation Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-386812.pdf | Mitigation Vendor Advisory |
Configurations
History
21 Nov 2024, 08:24
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-10 11:15
Updated : 2024-11-21 08:24
NVD link : CVE-2023-43625
Mitre link : CVE-2023-43625
CVE.ORG link : CVE-2023-43625
JSON object : View
Products Affected
siemens
- simcenter_amesim
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')