Medium severity · published Aug 10, 2022
CVE-2022-34659
A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used)
5.3
CVSS
0.7%
EPSS
No
On KEV
Description
A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used). Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Simcenter STAR-CCM+ · Siemens
0 · source: vendor
SS
Simcenter Star-ccm+ Viewer · Siemens
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-34659
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-34659
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-555707.html
Mitigation
https://cert-portal.siemens.com/productcert/pdf/ssa-555707.pdf
More from Simcenter STAR-CCM+
7.8
CVE-2021-25665
A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1)
6.7
CVE-2025-40945
A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D…
3.7
CVE-2025-40745
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002),…