Siemens Simcenter Femap
Siemens Simcenter Femap is affected by a vulnerability that could be triggered when the application reads modfem files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage this vulnerability to leak information in the context of the current process. Siemens recommends to update to the latest version line of Simcenter Femap (2021.2), which is not affected by this type of vulnerabilities. Siemens recommends to avoid opening of untrusted files from unknown sources.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37176US | low3.3 | — | ||
A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). The femap.exe application lacks proper validation of user-sup… | ||||
references
External citations — patches, advisories, analysis.
- SSA-997732: Modfem File Parsing Vulnerability in Simcenter Femap before V2021.2 - CSAF Versionself
- SSA-997732: Modfem File Parsing Vulnerability in Simcenter Femap before V2021.2 - PDF Versionself
- SSA-997732: Modfem File Parsing Vulnerability in Simcenter Femap before V2021.2 - TXT Versionself
- ICS Advisory ICSA-21-257-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-257-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSimcenter Femap V2020.2
Do not open untrusted modfem files from unknown sources
- MitigationSimcenter Femap V2021.1
Do not open untrusted modfem files from unknown sources
- FixedSimcenter Femap V2020.2
Update to V2021.2 or later version
- FixedSimcenter Femap V2021.1
Update to V2021.2 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan