{"id":"CVE-2022-43397","aliases":["EUVD-2022-46435","GHSA-fvjh-rh68-qmhg"],"status":"published","title":"A vulnerability has been identified in Parasolid V34.0 (All versions \u003c V34.0.252), Parasolid V34...","description":"A vulnerability has been identified in Parasolid V34.0 (All versions \u003c V34.0.252), Parasolid V34.1 (All versions \u003c V34.1.242), Parasolid V35.0 (All versions \u003c V35.0.170), Simcenter Femap (All versions \u003c V2023.1). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17854)","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00254,"percentile":0.17073,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2022-11-08T00:00:00Z","modified":"2026-06-17T05:06:26Z","products":[{"vendor":"siemens","product":"parasolid"},{"vendor":"siemens","product":"parasolid v34.0"},{"vendor":"siemens","product":"parasolid v34.1"},{"vendor":"siemens","product":"parasolid v35.0"},{"vendor":"siemens","product":"simcenter femap"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-853037.pdf","tags":["x_transferred","Mitigation","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-565356.pdf","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43397"},{"url":"https://github.com/advisories/GHSA-fvjh-rh68-qmhg"}],"sources":{"cve":[{"id":"CVE-2022-43397","description":"A vulnerability has been identified in Parasolid V34.0 (All versions \u003c V34.0.252), Parasolid V34.1 (All versions \u003c V34.1.242), Parasolid V35.0 (All versions \u003c V35.0.170), Simcenter Femap (All versions \u003c V2023.1). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17854)","status":"published","published":"2022-11-08T00:00:00Z","modified":"2025-04-21T13:46:27.727Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:34:25.308772Z"}],"euvd":[{"id":"EUVD-2022-46435","description":"A vulnerability has been identified in Parasolid V34.0 (All versions \u003c V34.0.252), Parasolid V34.1 (All versions \u003c V34.1.242), Parasolid V35.0 (All versions \u003c V35.0.170), Simcenter Femap (All versions \u003c V2023.1). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17854)","status":"published","published":"2022-11-08T00:00:00Z","modified":"2025-04-21T13:46:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T20:52:19.235376Z"}],"ghsa":[{"id":"GHSA-fvjh-rh68-qmhg","title":"A vulnerability has been identified in Parasolid V34.0 (All versions \u003c V34.0.252), Parasolid V34...","description":"A vulnerability has been identified in Parasolid V34.0 (All versions \u003c V34.0.252), Parasolid V34.1 (All versions \u003c V34.1.242), Parasolid V35.0 (All versions \u003c V35.0.170). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17854)","status":"published","published":"2022-11-08T12:00:17Z","modified":"2023-02-22T05:05:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:54:12.44657Z"}],"nvd":[{"id":"CVE-2022-43397","description":"A vulnerability has been identified in Parasolid V34.0 (All versions \u003c V34.0.252), Parasolid V34.1 (All versions \u003c V34.1.242), Parasolid V35.0 (All versions \u003c V35.0.170), Simcenter Femap (All versions \u003c V2023.1). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17854)","status":"published","published":"2022-11-08T11:15:11.88Z","modified":"2026-06-17T05:06:26.03Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:31.504574Z"}]}}