Siemens Simcenter Products Out-of-Bounds Read Vulnerability in NDB File Parsing

A vulnerability allowing out-of-bounds read has been identified in Siemens Simcenter Femap and Simcenter Nastran, all versions prior to V2512. This vulnerability occurs while parsing specially crafted NDB files, potentially allowing an attacker to execute code in the context of the current process.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to version V2512 or later. For Simcenter Femap, visit the Siemens Support page for the product. For Simcenter Nastran, also refer to the Siemens Support page for the product.