Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 8 November 2026 at 10:51.

Filters

1 active
Reset filters

1 advisories found

ICSA-26-230-02

Siemens Simcenter Nastran

Siemens — Simcenter Femap

CISAhigh

Published

11 August 2026

Last update

18 August 2026

Linked CVEs

Affected sectors

Risk evaluation

Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string as a file argument. If a user is tricked to run one of the impacted application binary with a malicious string, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released new versions for the affected products and recommends to update to the latest versions.

Mitigation summary

Update to V2606 or later version

Revision history (3)
  1. Initial publication — 11 August 2026

    Publication Date

  2. Update A — 13 August 2026

    Added Simcenter Femap with fix

  3. Update B — 18 August 2026

    Initial CISA Republication of Siemens ProductCERT SSA-069220 advisory

Official source: CISA