Siemens Simcenter Products Out-of-Bounds Write Vulnerability in XDB File Parsing Allowing Code Execution

A vulnerability allowing out-of-bounds write has been identified in Siemens Simcenter Femap and Simcenter Nastran, all versions prior to V2512. This vulnerability occurs while parsing specially crafted XDB files, potentially allowing an attacker to execute code in the context of the current process.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the affected application process.

Remediation

Users are advised to update to version V2512 or later. For Simcenter Femap, visit the Siemens Support page for the product. For Simcenter Nastran, also refer to the Siemens Support page for that product.