CVE-2021-27399

A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an allocated structure, a different vulnerability than CVE-2021-27387. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12820)

• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-133038.pdfPatch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-781/Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-133038.pdfPatch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-781/Third Party Advisory, VDB Entry

Published

Jun 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27393A vulnerability has been identified in Nucleus NET (All vers…5.3
• CVE-2021-27394A vulnerability has been identified in Mendix Applications u…8.8
• CVE-2021-27395A vulnerability has been identified in SIMATIC Process Histo…8.1
• CVE-2021-27396A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2021-27397A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2021-27398A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2021-27400HashiCorp Vault and Vault Enterprise Cassandra integrations …7.5
• CVE-2021-27401The Join Meeting page of Mitel MiCollab Web Client before 9.…6.1
• CVE-2021-27402The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could …6.5
• CVE-2021-27403Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices a…6.1
• CVE-2021-27404Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices a…6.1
• CVE-2021-27405A ReDoS (regular expression denial of service) flaw was foun…7.5