SSA-162616 V1.0: File Parsing Vulnerabilities in Simcenter Femap before V2022.2

Risk Summary

<p>Siemens Simcenter Femap versions before V2022.2 are affected by an out of bounds write vulnerability that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process.</p> <p>Siemens recommends to update to the latest version line of Simcenter Femap and to avoid opening of untrusted files from unknown sources.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)