Siemens Simcenter Femap and Nastran
Siemens Simcenter Femap and Nastran is affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in NDB and XDB formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-23720US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu… | ||||
| CVE-2026-23719US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected application is vulnerable to heap-based buffer… | ||||
| CVE-2026-23718US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu… | ||||
| CVE-2026-23717US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu… | ||||
| CVE-2026-23716US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu… | ||||
| CVE-2026-23715US | high7.3 | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds write v… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-965753: Multiple File Parsing Vulnerabilities in Simcenter Femap and Nastran Before V2512 - CSAF Versionself
- SSA-965753: Multiple File Parsing Vulnerabilities in Simcenter Femap and Nastran Before V2512 - HTML Versionself
- ICS Advisory ICSA-26-048-01 JSONself
- ICS Advisory ICSA-26-048-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (24)
- MitigationSimcenter Femap
Do not open untrusted NDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted NDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Femap
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted NDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted NDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted XDB files in affected applications
- MitigationSimcenter Nastran
Do not open untrusted XDB files in affected applications
- BehobenSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Femap
Update to V2512 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - BehobenSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - BehobenSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - BehobenSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - BehobenSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/ - BehobenSimcenter Nastran
Update to V2512 or later version
https://support.sw.siemens.com/product/289054037/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan