7.8

CVE-2022-39157: siemens parasolid Out-of-bounds Read

CVSS: 7.8v3.1HighModified
Published 08-11-2022Last modified 21-04-2025
Open JSON

Vulnerability summary

CVE-2022-39157 is a high (CVSS 7.8) Out-of-bounds Read vulnerability in siemens parasolid. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14.3% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 08-11-2022
    PublishedVulnerability first disclosed.
  2. 21-04-2025
    Last modifiedVulnerability information updated.

Description

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34.0.252 < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V34.1 (All versions >= V34.1.242 < V34.1.244), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.0 (All versions >= V35.0.170 < V35.0.184), Simcenter Femap (All versions < V2023.1). The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17745)

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

0.00 pp

From 0.24% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Siemens5 products
  • parasolid≥ 34.0.252, < 34.0.254 | ≥ 34.1.242, < 34.1.244 | ≥ 35.0.170, < 35.0.184
  • parasolid v34.0All versions < V34.0.252 | All versions >= V34.0.252 < V34.0.254
  • parasolid v34.1All versions < V34.1.242 | All versions >= V34.1.242 < V34.1.244
  • parasolid v35.0All versions < V35.0.170 | All versions >= V35.0.170 < V35.0.184
  • simcenter_femapAll versions < V2023.1

1 vendor · 5 products

References

2 links