Femap Vulnerability: Uninitialized Pointer Access in Catia MODEL Files

CVE-2024-24925

Summary

A significant vulnerability exists in Siemens Simcenter Femap, where all versions prior to V2306.0000 are susceptible to uninitialized pointer access. This flaw occurs when specially crafted Catia MODEL files are parsed, allowing an attacker to potentially execute arbitrary code within the context of the affected process. Given the sensitive nature of the operations typically conducted within Simcenter Femap, this vulnerability poses a considerable risk that necessitates prompt attention and remediation to protect users and their data from exploitation.

References