CVE-2024-41981: Siemens Simcenter Femap v2306

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process.

Affected products

• Siemens Simcenter Femap v2306: any version
• Siemens Simcenter Femap v2401: any version
• Siemens Simcenter Femap v2406: any version
• Siemens Simcenter Nastran: from 2306.0; from 2312.0; from 2406.0, before 2406.5000 (fixed in 2406.5000)

Published 2024-10-08. Last modified 2026-06-17.