SSA-674084 — SSA-674084: File Parsing Vulnerabilities in Simcenter Femap Before V2506

Summary

Simcenter Femap contains a file parsing vulnerability that could be triggered when the application reads files in STP or BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or potentially lead to arbitrary code execution.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

High 7.8

CVE-2025-40762

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All ve…

Siemens Simcenter Femap V2406 Simcenter Femap V2412 ICS / OT

Aug 12, 2025
High 7.8

CVE-2025-40764

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All ve…

Siemens Simcenter Femap V2406 Simcenter Femap V2412 ICS / OT

Aug 12, 2025

Revision history

2025-08-12 #1
Publication Date

References

SSA-674084: File Parsing Vulnerabilities in Simcenter Femap Before V2506 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-674084.html