SSA-386812 V1.0: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1

Simcenter Amesim contains a vulnerable SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process.

Siemens has released an update for Simcenter Amesim and recommends to update to the latest version.

application arbitrary code attacker code code execution context dll endpoint injection latest process remote code remote code execution siemens soap ssa unauthenticated update version vulnerability vulnerable