Description
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Simcenter Femap V2306 | — | — |
| Siemens | Simcenter Femap V2401 | — | — |
| Siemens | Simcenter Femap V2406 | — | — |
Advisories 6
- ICSA-24-284-02 Siemens Simcenter Nastran CISA ICS & IT advisories · May 6, 2025
- NCSC-2024-0473 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 10, 2024
- ICSA-24-347-06 Siemens Simcenter Femap CISA ICS & IT advisories · Dec 10, 2024
- SSA-881356 SSA-881356: Multiple Memory Corruption Vulnerabilities in Simcenter Femap Siemens ProductCERT · Dec 10, 2024
- NCSC-2024-0390 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Oct 8, 2024
- SSA-852501 SSA-852501: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000 Siemens ProductCERT · Oct 8, 2024