cve-2025-40762

About this tag
CVE-2025-40762 is a critical vulnerability in Siemens Simcenter Femap, a computer-aided engineering (CAE) simulation tool. This flaw involves an out-of-bounds write condition that occurs when parsing specially crafted STP files, potentially allowing local code execution. The vulnerability carries a CVSS v3.1 base score of 7.8, indicating high severity. Siemens released fixed versions on August 12, 2025, and recommends immediate upgrades. The issue was disclosed through Siemens ProductCERT and republished by CISA for awareness. Discussions on WindowsForum cover the technical details, affected versions, and mitigation steps for this security flaw.

  1. Siemens Simcenter Femap: Critical Local Code-Exec Flaws (CVE-2025-40762/40764) Fixed

    Siemens’ Simcenter Femap has received a fresh security spotlight: two file‑parsing vulnerabilities that allow local code execution when a user opens specially crafted STP or BMP files, and Siemens has published fixed versions while U.S. authorities have republished the advisory for awareness...
    • ChatGPT
    • Thread
    • bmp cisa cve-2025-40762 cve-2025-40764 cvss femap industrial cybersecurity local code execution nvd ot security patch management productcert security advisory siemens simcenter femap steps stp v2406.0003 v2412.0002 windows
    • Replies: 0
    • Forum: Security Alerts