Siemens Simcenter Femap Out-of-Bounds Write Vulnerability in STP File Parsing Allowing Code Execution

A vulnerability allowing out-of-bounds write has been identified in Siemens Simcenter Femap versions 2406 (prior to 2406.0003) and 2412 (prior to 2412.0002). This vulnerability arises when the application parses specially crafted STP files, potentially enabling an attacker to execute code within the context of the current process.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to Siemens Simcenter Femap version 2406.0003 or 2412.0002 or later. For more information, visit the Siemens Support page for Simcenter Femap.