PT-2025-50909 · Siemens · Simcenter Femap

Published 2025-12-12 · Updated 2025-12-17 · CVE-2025-40829

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simcenter Femap versions prior to 2512

Description An uninitialized memory issue exists in Simcenter Femap. The application is affected when processing specially crafted SLDPRT files, potentially allowing an attacker to execute code within the current process.

Recommendations Update Simcenter Femap to version 2512 or later.

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2025-40829

ZDI-25-1124

Affected Products

Simcenter Femap

References · 6

• https://osv.dev/vulnerability/CVE-2025-40829 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-512988.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40829 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1124 · Security Note
• https://t.me/CVEtracker/39603 · Telegram Post
• https://twitter.com/cracbot/status/2001246059801223412 · Twitter Post