VULNERABILITY INTELLIGENCE

CVE-2022-28661

CVSS score8.8 HIGH
EPSS probability1.20%
CISA KEVNot currently listed
Published2022-04-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15114)

Weakness classification

  • productcert@siemens.com: CWE-125
  • nvd@nist.gov: CWE-125

Primary references