CVE-2023-43625

9.8 criticalEPSS 1.4%

Critical (9.8) in siemens simcenter amesim. EPSS 1.4% chance of exploitation in the next 30 days.

A vulnerability has been identified in Simcenter Amesim (All versions < V2021.1). The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2023-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:simcenter_amesim

References

https://cert-portal.siemens.com/productcert/pdf/ssa-386812.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-386812.pdf

Check your stack JSON