Siemens Simcenter Femap
Simcenter Femap contains a file parsing vulnerability that could be triggered when the application reads files in STP or BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40764US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contains an o… | ||||
| CVE-2025-40762US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contain an ou… | ||||
references
External citations — patches, advisories, analysis.
- SSA-674084: File Parsing Vulnerabilities in Simcenter Femap Before V2506 - CSAF Versionself
- SSA-674084: File Parsing Vulnerabilities in Simcenter Femap Before V2506 - HTML Versionself
- ICS Advisory ICSA-25-226-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-226-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationSimcenter Femap V2406
Do not open untrusted BMP files in affected applications
- MitigationSimcenter Femap V2406
Do not open untrusted STP files in affected applications
- MitigationSimcenter Femap V2412
Do not open untrusted BMP files in affected applications
- MitigationSimcenter Femap V2412
Do not open untrusted STP files in affected applications
- FixedSimcenter Femap V2406
Update to V2406.0003 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap V2406
Update to V2406.0003 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap V2412
Update to V2412.0002 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap V2412
Update to V2412.0002 or later version
https://support.sw.siemens.com/product/275652363/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan