Siemens Simcenter Products Heap-Based Buffer Overflow Vulnerability Allowing Code Execution

A heap-based buffer overflow vulnerability has been identified in Siemens Simcenter Femap and Simcenter Nastran, all versions prior to V2512. The vulnerability arises while parsing specially crafted NDB files, which could enable an attacker to execute code in the context of the current process.

Impact

Exploitation of this vulnerability could lead to a heap-based buffer overflow, allowing for arbitrary code execution in the context of the affected application process.

Remediation

Users are advised to update to version V2512 or later. For Simcenter Femap, visit the Siemens Support page for the product. For Simcenter Nastran, also refer to the Siemens Support page for the product.