VULNERABILITY INTELLIGENCE
CVE-2022-28662
CVSS score6.5 MEDIUM
EPSS probability0.88%
CISA KEVNot currently listed
Published2022-04-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted .NEU files. This could allow an attacker to leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15307)
Weakness classification
- CWE-787: Out-of-bounds Write
Primary references
- productcert@siemens.com — Mitigation, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory