PT-2022-26953 · Siemens · Simcenter Star-Ccm+

Published 2022-12-13 · Updated 2023-07-11 · CVE-2022-43517

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simcenter STAR-CCM+ versions prior to V2306

Description A vulnerability has been identified in the affected application, where it improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges.

Recommendations For versions prior to V2306, update to version V2306 or later to resolve the issue. As a temporary workaround, consider restricting access to the installation folders to prevent modification of service executables.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-43517

Affected Products

Simcenter Star-Ccm+

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-43517 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-930100.pdf · Vendor Advisory
• https://t.me/cibsecurity/54429 · Telegram Post
• https://t.me/cvenotify/39751 · Telegram Post