CVE-2024-24924 — A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000)

Back Back to CVE browser

HIGH

A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000)

Published Feb 13, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.32%

Description

A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-22059)

Affected products

Vendor Siemens Product Simcenter Femap Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2306.0000

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

Simcenter Femap

n/a

Version	Status	Constraints
0	affected	<V2306.0000

Remediation

No remediation recorded yet.

Metrics

0.32% 0.00318

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00318

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (7 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.32% (0.00318)	22.38th	v5 (v2026.06.15)
Jun 15, 2026	0.32% (0.00318)	23.26th	v5 (v2026.06.15)
Mar 17, 2025	0.06% (0.00057)	14.89th	v4 (v2025.03.14)
Dec 12, 2024	0.06% (0.00057)	25.79th	v3 (v2023.03.01)
Jun 12, 2024	0.07% (0.00075)	32.41th	v3 (v2023.03.01)
Feb 18, 2024	0.07% (0.00075)	30.41th	v3 (v2023.03.01)
Feb 14, 2024	0.04% (0.00043)	6.69th	v3 (v2023.03.01)