Our takeSiemens fixed two BMP parsing flaws in Simcenter Femap that can crash the app or run arbitrary code; Parasolid also got an out-of-bounds read fix for X_T files. Update now if you run either.Cyber Resilience desk
What this means for you — Security leader:Update to the latest Simcenter Femap version if you use it for engineering workflows. Siemens also released fixes for a separate out-of-bounds read in Parasolid affecting multiple products — patch those as well.
What this means for you — Lean IT orgs:If your team uses Siemens Simcenter Femap, install the newest version. Most lean-IT shops without CAD engineering tools can ignore this.
What this means for you — MSP:Check client environments for Siemens Simcenter Femap and Parasolid usage; push the vendor's latest versions where found. This is primarily relevant to manufacturing/engineering clients.
What this means for you — Researcher:Siemens fixed two BMP parsing flaws in Simcenter Femap that can crash the app or enable code execution, plus an out-of-bounds read in Parasolid X_T handling. Both are covered in today's paired ICS advisories.