ICSA-22-258-02 · Published 2022-09-13 · View on CISA ICS-CERT ↗

Siemens Simcenter Femap and Parasolid

CVSS 7.8 HIGH

CVEs (20)

CVE-2022-39137 CVE-2022-39138 CVE-2022-39139 CVE-2022-39140 CVE-2022-39141 CVE-2022-39142 CVE-2022-39143 CVE-2022-39144 CVE-2022-39145 CVE-2022-39146 CVE-2022-39147 CVE-2022-39148 CVE-2022-39149 CVE-2022-39150 CVE-2022-39151 CVE-2022-39152 CVE-2022-39153 CVE-2022-39154 CVE-2022-39155 CVE-2022-39156

Remediations

Do not open untrusted X_T files in Simcenter Femap or Parasolid
Update to V33.1.262 or later version
Update to V34.0.252 or later version
Update to V34.1.242 or later version
Update to V2022.1.3 or later version
Update to V2022.2.2 or later version
Update to V35.0.161 or later version
Update to V33.1.263 or later version
Update to V35.0.164 or later version

Affected Vendors

Siemens

Affected Products (8)

Siemens · Parasolid V33.1 <V33.1.262

Siemens · Parasolid V33.1 >=V33.1.262_<V33.1.263

Siemens · Parasolid V34.0 <V34.0.252

Siemens · Parasolid V34.1 <V34.1.242

Siemens · Parasolid V35.0 <V35.0.161

Siemens · Parasolid V35.0 >=V35.0.161_<V35.0.164

Siemens · Simcenter Femap V2022.1 <V2022.1.3

Siemens · Simcenter Femap V2022.2 <V2022.2.2

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more