Siemens Simcenter Femap
Simcenter Femap is affected by file parsing vulnerabilities in Datakit library and Parasolid Translator Component that could be triggered when the application reads files in IPT or IGS format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released a new version for Simcenter Femap and recommends to update to the latest version.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-12659US | — | — | ||
Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the cur… | ||||
| CVE-2025-40936US | — | — | ||
A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V2… | ||||
references
External citations — patches, advisories, analysis.
- SSA-870926: Datakit and Parasolid Vulnerabilities in Simcenter Femap - CSAF Versionself
- SSA-870926: Datakit and Parasolid Vulnerabilities in Simcenter Femap - HTML Versionself
- ICS Advisory ICSA-26-134-05 JSONself
- ICS Advisory ICSA-26-134-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- FixedSimcenter Femap
Update to V2512.0003 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap
Update to V2512.0003 or later version
https://support.sw.siemens.com/product/275652363/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan