PT-2024-7985 · Siemens · Simcenter Nastran+1

Michael Heinzl · Published 2024-10-08 · Updated 2025-10-15 · CVE-2024-47046

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simcenter Femap versions V2306 through V2406 Simcenter Nastran versions 2306 through 2312

Description The issue is related to a memory corruption vulnerability while parsing specially crafted BDF files, which could allow an attacker to execute code in the context of the current process. This is due to the use of memory after it has been freed.

Recommendations For Simcenter Femap versions V2306 through V2406, update to a version that includes the fix for the memory corruption issue. For Simcenter Nastran versions 2306 through 2312, update to a version that includes the fix for the memory corruption issue. As a temporary workaround, consider restricting the use of the BDF File Handler component until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2024-09499

CVE-2024-47046

Affected Products

Simcenter Femap

Simcenter Nastran

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2024-47046 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-852501.html · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-881356.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09499 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47046 · Vendor Advisory
• https://vuldb.com/?id.279610 · Note
• https://twitter.com/cracbot/status/1845343810668347417 · Twitter Post
• https://t.me/cvedetector/7343 · Telegram Post
• https://twitter.com/CharyyevPerman/status/1845491649725841650 · Twitter Post
• https://t.me/latest_high_impact_cve/1289 · Telegram Post
• https://vulners.com/cve/CVE-2024-47046 · Note
• https://t.me/cveNotify/138834 · Telegram Post