Summary
Siemens Tecnomatix Plant Simulation has released an update for version V16.0 that fixes multiple vulnerabilities that could be triggered when the application reads SPP files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the target host system.
Siemens recommends to update to the latest version and to avoid opening of untrusted files from unknown sources.
Vulnerabilities 3
-
Unscored —
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…
-
Unscored —
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…
-
Unscored —
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…
Revision history
-
#1
Publication Date
References
-
SSA-983548: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-983548.pdf
-
SSA-983548: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-983548.txt