CVE-2024-53977

CVE-2024-53977 is a high-severity vulnerability (CVSS 7.8) affecting Siemens ModelSim and Questa (all versions prior to V2025.1). It allows an authenticated local attacker to achieve arbitrary code injection and privilege escalation. This occurs because an example setup script in the affected applications loads a specific executable from the current working directory, enabling malicious code execution if launched from a user-writable directory by an administrator or privileged process. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.