VDB
ICSA-24-284-05
ICSA-24-284-05
PUBLISHED
CVSS 6.699999809265137 MEDIUM
Record from circl · Published October 8, 2024
Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
Risk scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| ModelSim | ||
| Questa |
Timeline
- Oct 8, 2024 CVE Published
- May 6, 2025 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln ICSA-24-284-05
vulnetix vdb fixes ICSA-24-284-05Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/ICSA-24-284-05/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://cert-portal.siemens.com/productcert/html/ssa-426509.html advisory
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-284-05.json advisory
- https://www.cisa.gov/topics/industrial-control-systems url
- https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01 url
- https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf url
- https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B url
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices url
- https://cert-portal.siemens.com/productcert/csaf/ssa-426509.json advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-05 advisory
- https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf url