Skip to content
OpenAdvisories
High SSA-847261 28 CVEs

SSA-847261: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation

Published Feb 14, 2023 · Updated Mar 14, 2023 · Revision 2

Summary

Siemens Tecnomatix Plant Simulation has released an update, 2201 Update 6, that fixes multiple vulnerabilities that could be triggered when the application reads SPP files.
If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system.

Siemens recommends to update to the latest version and to avoid opening of untrusted files from unknown sources.

Vulnerabilities 28

Revision history

  1. #2

    Added 9 new CVEs that are fixed CVE-2023-27398, CVE-2023-27399, CVE-2023-27400, CVE-2023-27401, CVE-2023-27402, CVE-2023-27403, CVE-2023-27404, CVE-2023-27405 and CVE-2023-27406

  2. #1

    Publication Date

References