{"id":"CVE-2024-24925","aliases":["EUVD-2024-22288","GHSA-rvmf-9rf3-4vc3"],"status":"published","title":"A vulnerability has been identified in Simcenter Femap (All versions \u003c V2306.0000). The affected...","description":"A vulnerability has been identified in Simcenter Femap (All versions \u003c V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-22060)","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0031,"percentile":0.24134,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-824"],"published":"2024-02-13T09:00:34Z","modified":"2026-06-17T07:15:14Z","products":[{"vendor":"siemens","product":"simcenter femap"},{"vendor":"siemens","product":"simcenter_femap"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-000072.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24925"},{"url":"https://github.com/advisories/GHSA-rvmf-9rf3-4vc3"}],"sources":{"cve":[{"id":"CVE-2024-24925","description":"A vulnerability has been identified in Simcenter Femap (All versions \u003c V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-22060)","status":"published","published":"2024-02-13T09:00:34.363Z","modified":"2024-08-01T23:36:20.217Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-824"],"updated_at":"2026-11-02T14:34:13.991836Z"}],"euvd":[{"id":"EUVD-2024-22288","description":"A vulnerability has been identified in Simcenter Femap (All versions \u003c V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-22060)","status":"published","published":"2024-02-13T09:00:34Z","modified":"2024-08-01T23:36:20Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-03T03:50:28.273902Z"}],"ghsa":[{"id":"GHSA-rvmf-9rf3-4vc3","title":"A vulnerability has been identified in Simcenter Femap (All versions \u003c V2306.0000). The affected...","description":"A vulnerability has been identified in Simcenter Femap (All versions \u003c V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-22060)","status":"published","published":"2024-02-13T09:30:33Z","modified":"2024-02-13T09:30:37Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-824"],"updated_at":"2026-11-02T14:55:36.780787Z"}],"nvd":[{"id":"CVE-2024-24925","description":"A vulnerability has been identified in Simcenter Femap (All versions \u003c V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-22060)","status":"published","published":"2024-02-13T09:15:51.577Z","modified":"2026-06-17T07:15:14.32Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-824"],"updated_at":"2026-11-02T14:09:35.738752Z"}]}}