CVE-2021-46160

HIGH 7.8CVE-2021-46160 · Published 09/02/2022 · updated 17/06/2026

In short

CVE-2021-46160 is a HIGH (CVSS 7.8) vulnerability affecting simcenter femap (siemens).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simcenter femap siemens	`= 2020.2= 2021.1`	No fix yet

Description

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15286)

References

cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-22-315 · Third Party Advisory

More vulnerabilities in simcenter femap

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

simcenter femap

siemens

= 2020.2= 2021.1

No fix yet

Description

More vulnerabilities in simcenter femap

See all →