VDB
CVE-2024-53977
CVE-2024-53977
PUBLISHED
CVSS 6.699999809265137 MEDIUM
A vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions < V2025.1). An example setup script contained in affected applications allows a specific executable file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges in installations where administrators or processes with elevated privileges launch the script from a user-writable directory.
EPSS 0.05% · 16.7th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.05%
16.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Questa | 0 |
| Siemens | ModelSim | 0 |
| siemens | modelsim | 0 |
| siemens | questa | 0 |
Exploit Intelligence
- CIRCL seen: CVE-2024-53977 (circl-sighting)
- CIRCL seen: CVE-2024-53977 (circl-sighting)
- CIRCL seen: CVE-2024-53977 (circl-sighting)
- CIRCL seen: CVE-2024-53977 (circl-sighting)
- https://cert-portal.siemens.com/productcert/html/ssa-637914.html (circl)
Timeline
- Feb 11, 2025 CVE Published
- Feb 11, 2025 PoC Published
- Feb 11, 2025 PoC Published
- Feb 11, 2025 PoC Published
- Feb 11, 2025 CVE Updated
- Feb 12, 2025 EPSS Score
- Feb 13, 2025 PoC Published
- Feb 26, 2025 Coalition ESS Score
- Feb 27, 2025 EPSS Score
- Mar 13, 2025 EPSS Score
- Mar 26, 2025 Coalition ESS Score
- Mar 28, 2025 EPSS Score