Summary
Tecnomatix Plant Simulation contains an out of bounds write vulnerability that could be triggered when the application reads MODEL files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system.
Siemens has released a new version for Tecnomatix Plant Simulation V2302 and recommends to update to the latest version.
Vulnerabilities 1
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0011). The affected appl…
Revision history
-
#1
Publication Date
References
-
SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-923361.html
-
SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-923361.pdf
-
SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-923361.txt