Siemens Simcenter Femap and Nastran
Siemens Simcenter Femap and Nastran is affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in NDB and XDB formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-23720US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu… | ||||
| CVE-2026-23719US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected application is vulnerable to heap-based buffer… | ||||
| CVE-2026-23718US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu… | ||||
| CVE-2026-23717US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu… | ||||
| CVE-2026-23716US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu… | ||||
| CVE-2026-23715US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds write v… | ||||
references
External citations — patches, advisories, analysis.
- SSA-965753: Multiple File Parsing Vulnerabilities in Simcenter Femap and Nastran Before V2512 - CSAF Versionself
- SSA-965753: Multiple File Parsing Vulnerabilities in Simcenter Femap and Nastran Before V2512 - HTML Versionself
- ICS Advisory ICSA-26-048-01 JSONself
- ICS Advisory ICSA-26-048-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (24)
- MitigationSimcenter Femap
Do not open untrusted NDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted NDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted NDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted NDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted XDB files in affected applications
- FixedSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - FixedSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - FixedSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - FixedSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - FixedSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - FixedSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan