{"id":"CVE-2024-24921","state":"PUBLISHED","title":"A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing specially crafted Cati","description":"A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing specially crafted Catia MODEL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21712)","publishedAt":"2024-02-13T09:00:29.522Z","updatedAt":"2025-05-08T18:26:02.154Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","source":"siemens"},"assigner":"siemens","products":["Siemens Simcenter Femap"],"affected":[{"vendor":"Siemens","product":"Simcenter Femap","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2401.0000","versionType":"custom"}]}],"references":["https://cert-portal.siemens.com/productcert/html/ssa-000072.html"],"weaknesses":["CWE-119"],"ingestedAt":"2026-10-29T20:07:10.607Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/24xxx/CVE-2024-24921.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-24921","state":"PUBLISHED","datePublished":"2024-02-13T09:00:29.522Z","dateUpdated":"2025-05-08T18:26:02.154Z","assignerShortName":"siemens","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateReserved":"2024-02-01T15:21:44.578Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing specially crafted Catia MODEL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21712)"}],"affected":[{"vendor":"Siemens","product":"Simcenter Femap","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2401.0000","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-000072.html"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","baseScore":7.8,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","lang":"en","description":"CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","type":"CWE"}]}],"providerMetadata":{"shortName":"siemens","orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateUpdated":"2024-03-12T10:22:05.331Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-000072.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T23:36:21.096Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-02-13T16:03:00.862093Z","id":"CVE-2024-24921","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-08T18:26:02.154Z"}}]}}}