A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-22051)
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-000072.html | Vendor Advisory |
| https://cert-portal.siemens.com/productcert/html/ssa-000072.html | Vendor Advisory |
Configurations
History
20 Aug 2025, 16:27
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens
Siemens simcenter Femap |
|
| CPE | cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:* | |
| References | () https://cert-portal.siemens.com/productcert/html/ssa-000072.html - Vendor Advisory |
21 Nov 2024, 09:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-000072.html - |
12 Mar 2024, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-12 11:15
Updated : 2025-08-20 16:27
NVD link : CVE-2024-27907
Mitre link : CVE-2024-27907
CVE.ORG link : CVE-2024-27907
JSON object : View
Products Affected
siemens
- simcenter_femap
CWE
CWE-787
Out-of-bounds Write