Siemens Simcenter Nastran
Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string as a file argument. If a user is tricked to run one of the impacted application binary with a malicious string, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-59086US | — | — | ||
A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606). The affected applications contain a stack overflow vulnerab… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-069220: Stack Overflow Vulnerability in Simcenter Nastran Before V2606 - CSAF Versionself
- SSA-069220: Stack Overflow Vulnerability in Simcenter Nastran Before V2606 - HTML Versionself
- ICS Advisory ICSA-26-230-02 JSONself
- ICS Advisory ICSA-26-230-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- BehobenSimcenter Femap
Update to V2606 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Nastran
Update to V2606 or later version
https://support.sw.siemens.com/product/275652363/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan