EUVD-2026-56120
GHSA-v69q-r268-rv35
Severity by source
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local attack vector with required user invocation and high complexity to reliably control execution; no privilege escalation and no scope change beyond the process context.
Primary rating from Vendor (siemens).
CVSS VectorVendor: siemens
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability has been identified in Simcenter Nastran (All versions < V2606). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.
AnalysisAI
Stack-based code execution in Simcenter Nastran allows an attacker who can supply maliciously crafted string arguments to an affected application binary to overflow a stack buffer and execute arbitrary code within the running process context. All versions of Siemens' finite-element analysis solver prior to V2606 are affected, as confirmed by Siemens ProductCERT advisory SSA-069220. No public exploit code has been identified and this vulnerability is absent from the CISA Known Exploited Vulnerabilities catalog at time of analysis.
Technical ContextAI
Simcenter Nastran (CPE: cpe:2.3:a:siemens:simcenter_nastran:*:*:*:*:*:*:*:*) is Siemens' commercial finite-element analysis solver widely used in structural, thermal, and fluid simulations across aerospace, automotive, and industrial engineering sectors. The root cause is CWE-121 (Stack-based Buffer Overflow): one or more application binaries fail to validate the length of a user-supplied string before copying it into a fixed-size stack buffer during argument parsing. Because stack buffers are adjacent to saved return addresses and frame pointers, an oversized input can overwrite control-flow data and redirect execution to attacker-controlled code. The CVSS 4.0 local attack vector (AV:L) and passive user interaction (UI:P) indicate the vulnerable code path is reached only when a user or automated process invokes the affected binary with crafted command-line arguments, not via a network-reachable interface.
RemediationAI
The primary fix is to upgrade Simcenter Nastran to version V2606 or later per Siemens ProductCERT advisory SSA-069220 at https://cert-portal.siemens.com/productcert/html/ssa-069220.html. Until patching is feasible, organizations should strictly control what arguments are passed to Simcenter Nastran binaries by ensuring that command-line inputs are never sourced from untrusted external data, user-submitted job files, or unvalidated scripts - wrapping affected binaries with an input-validation layer or argument allowlist would reduce the attack surface without disabling core solver functionality. Running Simcenter Nastran under a dedicated low-privilege service account and isolating its execution environment through OS-level sandboxing or containerization would limit the blast radius of any successful exploitation, since code execution is confined to the invoking process context. Restricting file system and network access for the process using mandatory access control frameworks (e.g., SELinux or AppArmor) adds a compensating layer pending patch deployment.
More in Simcenter Nastran
View allLocal privilege escalation in Siemens' IAM Client SDK, a shared authentication component bundled across a wide range of
Arbitrary code execution in Simcenter Femap and Nastran versions prior to V2512 results from an out-of-bounds write flaw
Code execution in Simcenter Femap and Nastran versions prior to V2512 results from an out-of-bounds read flaw triggered
Heap-based buffer overflow in Simcenter Femap and Nastran versions prior to V2512 allows local attackers to achieve arbi
Out-of-bounds read in Simcenter Femap and Nastran versions prior to V2512 during NDB file parsing enables local code exe
Simcenter Femap and Nastran versions prior to 2512 are vulnerable to out-of-bounds memory reads when processing maliciou
Arbitrary code execution in Simcenter Femap and Nastran versions prior to 2512 results from an out-of-bounds read when p
A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simce
A vulnerability has been identified in Simcenter Femap (All versions < V2406). Rated high severity (CVSS 7.3), this vuln
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today