Summary
Simcenter Femap is affected by file parsing vulnerabilities in Datakit library and Parasolid Translator Component that could be triggered when the application reads files in IPT or IGS format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process.
Siemens has released a new version for Simcenter Femap and recommends to update to the latest version.
Vulnerabilities 2
-
High 7.8
Heap-based buffer overflow in Siemens Simcenter Femap
Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process.
-
High 7.8
A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Fem…
Revision history
-
#2
Added CVE-2025-40936
-
#1
Publication Date
References
-
SSA-870926: Datakit and Parasolid Vulnerabilities in Simcenter Femap - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-870926.html