Siemens Simcenter Products Out-of-Bounds Read Vulnerability Allowing Code Execution

A vulnerability exists in Siemens Simcenter Femap and Simcenter Nastran, all versions prior to V2512. The issue is an out-of-bounds read vulnerability that occurs while parsing specially crafted XDB files. This vulnerability could enable an attacker to execute code within the context of the current process.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to version V2512 or later. For Simcenter Femap, visit the Siemens Support page for the product. For Simcenter Nastran, also refer to the Siemens Support page for the product.