Siemens Simcenter Femap versions before V2512.0003 are affected by CVE-2025-12659, a high-severity heap-based buffer overflow in the Datakit library that can be triggered when a user opens a malicious Autodesk Inventor IPT file, according to Siemens and CISA advisories published in May 2026. The...
Siemens’ Simcenter Femap has received a fresh security spotlight: two file‑parsing vulnerabilities that allow local code execution when a user opens specially crafted STP or BMP files, and Siemens has published fixed versions while U.S. authorities have republished the advisory for awareness...
Siemens Simcenter Femap, a widely used simulation and finite element analysis tool, is now in the spotlight due to a newly reported vulnerability that has ignited discussions across IT and industrial security communities. This memory corruption issue, stemming from an “Improper Restriction of...
What’s Behind the Warning?
Beginning January 10, 2023, CISA stated that it will stop updating Industrial Control System (ICS) security advisories specific to Siemens product vulnerabilities beyond the initial advisory. For ongoing updates, users are encouraged to consult Siemens' ProductCERT...