Description
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27398. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13279)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Tecnomatix Plant Simulation | All versions < V16.0.5 | — |
Advisories 2
- ICSA-21-131-08 Siemens Tecnomatix Plant Simulation CISA ICS & IT advisories · May 6, 2025
- SSA-983548 SSA-983548: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation Siemens ProductCERT · May 11, 2021