SSA-674084: File Parsing Vulnerabilities in Simcenter Femap Before V2506
Simcenter Femap contains a file parsing vulnerability that could be triggered when the application reads files in STP or BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40764US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contains an o… | ||||
| CVE-2025-40762US | — | — | ||
A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contain an ou… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- MitigationSimcenter Femap V2406
Do not open untrusted BMP files in affected applications
- MitigationSimcenter Femap V2406
Do not open untrusted STP files in affected applications
- MitigationSimcenter Femap V2412
Do not open untrusted BMP files in affected applications
- MitigationSimcenter Femap V2412
Do not open untrusted STP files in affected applications
- BehobenSimcenter Femap V2406
Update to V2406.0003 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Femap V2406
Update to V2406.0003 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Femap V2412
Update to V2412.0002 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Femap V2412
Update to V2412.0002 or later version
https://support.sw.siemens.com/product/275652363/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan