Summary
Siemens Tecnomatix RobotExpert version V16.1 fixes a vulnerability that could be triggered when the application reads CELL files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the target host system.
Siemens recommends to update to the latest version and to avoid opening of untrusted files from unknown sources.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in Tecnomatix RobotExpert (All versions < V16.1). Affected applications lack proper…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-163226: CELL File Parsing Vulnerability in Tecnomatix RobotExpert - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-163226.txt
-
SSA-163226: CELL File Parsing Vulnerability in Tecnomatix RobotExpert - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-163226.pdf
-
ICS Advisory ICSA-21-103-12 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-103-12
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B