{"id":"CVE-2026-23717","state":"PUBLISHED","title":"A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vu","description":"A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vulnerability while parsing specially crafted XDB files. This could allow an attacker to execute code in the context of the current process.","publishedAt":"2026-02-10T09:58:48.864Z","updatedAt":"2026-02-10T15:24:46.229Z","severity":{"score":7.3,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"siemens"},"assigner":"siemens","products":["Siemens Simcenter Femap","Siemens Simcenter Nastran"],"affected":[{"vendor":"Siemens","product":"Simcenter Femap","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2512","versionType":"custom"}]},{"vendor":"Siemens","product":"Simcenter Nastran","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2512","versionType":"custom"}]}],"references":["https://cert-portal.siemens.com/productcert/html/ssa-965753.html"],"weaknesses":["CWE-125"],"ingestedAt":"2026-10-29T20:11:21.040Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/23xxx/CVE-2026-23717.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-23717","state":"PUBLISHED","datePublished":"2026-02-10T09:58:48.864Z","dateUpdated":"2026-02-10T15:24:46.229Z","assignerShortName":"siemens","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateReserved":"2026-01-15T14:48:10.775Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vulnerability while parsing specially crafted XDB files. This could allow an attacker to execute code in the context of the current process."}],"affected":[{"vendor":"Siemens","product":"Simcenter Femap","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2512","versionType":"custom"}]},{"vendor":"Siemens","product":"Simcenter Nastran","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2512","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-965753.html"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH"}},{"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseScore":7.3,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","lang":"en","description":"CWE-125: Out-of-bounds Read","type":"CWE"}]}],"providerMetadata":{"shortName":"siemens","orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateUpdated":"2026-02-10T09:58:48.864Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-10T15:24:30.474202Z","id":"CVE-2026-23717","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-10T15:24:46.229Z"}}]}}}