Siemens Simcenter Products Out-of-Bounds Read Vulnerability Allowing Code Execution

A vulnerability allowing out-of-bounds read has been identified in Siemens Simcenter Femap and Simcenter Nastran, all versions prior to V2512. This vulnerability occurs while parsing specially crafted NDB files, potentially allowing an attacker to execute code in the context of the current process.

Impact

Exploitation of this vulnerability could lead to out-of-bounds read, allowing for arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to version V2512 or later. For Simcenter Femap, visit the Siemens Support page for the product. For Simcenter Nastran, also refer to the Siemens Support page for the product.