Skip to content
OpenAdvisories
High SSA-764801 10 CVEs

SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation

Published Jul 11, 2023 · Updated Sep 12, 2023 · Revision 3

Vendor: Siemens Product: Tecnomatix Plant Simulation V2201 Product: Tecnomatix Plant Simulation V2302

Summary

Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities that could be triggered when the application reads PAR, SPP, STP and PRT files.
If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 10

Revision history

  1. #3

    Added CVE-2023-41846 fixed in the same product versions (V2201.0008, V2302.0002)

  2. #2

    Added additional vulnerabilities CVE-2023-38679, CVE-2023-38680, CVE-2023-38681 that are fixed in the same product versions (V2201.0008, V2302.0002)

  3. #1

    Publication Date

References