CVE-2025-12659
highpriority · track · 0EPSS 0.002 · 10 %ileDEEUNLRUUSEPSS · scored 2026-10-27
Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSimcenter Femapsiemens_psirt
Update to V2512.0003 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femapcisa_csaf_ot
Update to V2512.0003 or later version
https://support.sw.siemens.com/product/275652363/
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.4–7.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (47)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- NCSC-2026-0147Kwetsbaarheden verholpen in Siemens-productenNL2026-05-13csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in verschillende (OT-)producten. Het gaat onder andere om producten in de Siemens RUGGEDCOM-, SCALANCE-, SIMATIC-, SIMIT-, SINAMICS-, SIPROTEC-, SENTRON- en Solid Edge-productreeksen.
- SSA-870926SSA-870926: Datakit and Parasolid Vulnerabilities in Simcenter Femap2026-05-12csaf · siemens_psirtDE
Simcenter Femap is affected by file parsing vulnerabilities in Datakit library and Parasolid Translator Component that could be triggered when the application reads files in IPT or IGS format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released a new version for Simcenter Femap and recommends to update to the latest version.
- ICSA-26-134-05Siemens Simcenter Femap2026-05-12icsa · cisa_csaf_otUS
Simcenter Femap is affected by file parsing vulnerabilities in Datakit library and Parasolid Translator Component that could be triggered when the application reads files in IPT or IGS format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released a new version for Simcenter Femap and recommends to update to the latest version.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (11)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2025-12659cnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-870926.htmlcnnvd
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-134-05.jsoncnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2025-12659cnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-05cnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-870926.htmlenisa_euvd
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-134-05.jsonenisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-05enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan