CVE-2024-32062

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21568)

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

Vendor	Product	Versions
Siemens	Simcenter Femap	< V2406
siemens	ps_iges_parasolid_translator_component	< v27.1.215

References

https://cert-portal.siemens.com/productcert/html/ssa-064222.htmlVendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-976324.htmlVendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-064222.htmlVendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-976324.htmlVendor Advisory

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-320637.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabil CVE-2024-320647.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past CVE-2024-320657.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past CVE-2024-320667.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past CVE-2024-32079.8A vulnerability was found in ermig1979 Simd up to 6.0.134. It has been declared as critical. This vulnerability affects the function ReadUns CVE-2024-320775.4Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.CVE-2024-320784.1URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Foliovision FV Flowplayer Video Player.This issue affects FV Flowplayer CVE-2024-320796.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Dempfle Advanced iFrame allows CVE-2024-32085.4The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterable Gallery widget in all versi CVE-2024-320805.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick Pelton Search Keyword Redirect al CVE-2024-320818.8Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxono CVE-2024-320826.1Cross-Site Request Forgery (CSRF) vulnerability in Kamlesh Parmar Sync Post With Other Site sync-post-with-other-site allows Cross Site Requ