Multiple File Parsing Vulnerabilities in Simcenter Femap

An engineer tricked into opening a malicious CATIA model file could allow an attacker to crash Femap or execute arbitrary code on the engineering workstation, potentially compromising the design and simulation environment or accessing sensitive engineering data.

Engineering teams using Simcenter Femap for finite element analysis and design simulation should prioritize this update. This affects design and simulation workstations in manufacturing, automotive, aerospace, and infrastructure sectors where engineers use Femap for model development and analysis.

An attacker crafts a malicious CATIA MODEL file and tricks an engineer into opening it in Simcenter Femap. When Femap parses the file, a buffer overflow or out-of-bounds read vulnerability is triggered, causing a crash or allowing code execution with the privileges of the user running Femap.