Risk | Low |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2021-42023 |
CWE-ID | CWE-522 |
Exploitation vector | Local |
Public exploit | N/A |
Vulnerable software |
ModelSim Simulation Server applications / Other server solutions Questa Simulation Server applications / Other server solutions |
Vendor | Siemens |
Security Bulletin
This security bulletin contains one low risk vulnerability.
EUVDB-ID: #VU59231
Risk: Low
CVSSv4.0: 6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-42023
CWE-ID:
CWE-522 - Insufficiently Protected Credentials
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to compromise the target system.
The vulnerability exists due to insufficiently protected keys required for decrypting intellectual property data. A local attacker can discover the keys and bypass the protection.
MitigationInstall updates from vendor's website.
Vulnerable software versionsModelSim Simulation: All versions
Questa Simulation: All versions
CPE2.3https://cert-portal.siemens.com/productcert/pdf/ssa-400332.pdf
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.