PT-2024-32475 · Mentor Graphics · Questa+1

Ycdxsb · Published 2024-10-08 · Updated 2024-10-16 · CVE-2024-47196

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ModelSim versions prior to V2024.3 Questa versions prior to V2024.3

Description A vulnerability has been identified that allows an authenticated local attacker to inject arbitrary code and escalate privileges. This occurs when vsimk.exe in affected applications loads a specific tcl file from the current working directory, potentially allowing privilege escalation in installations where administrators or processes with elevated privileges launch vsimk.exe from a user-writable directory.

Recommendations For ModelSim versions prior to V2024.3, update to version V2024.3 or later to resolve the issue. For Questa versions prior to V2024.3, update to version V2024.3 or later to resolve the issue. As a temporary workaround, consider restricting the launch of vsimk.exe from user-writable directories to minimize the risk of exploitation.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2024-47196

Affected Products

Modelsim

Questa

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-47196 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-426509.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-47196 · Vendor Advisory
• https://twitter.com/CVEnew/status/1843575678769283118 · Twitter Post
• https://t.me/cvedetector/7339 · Telegram Post