Description
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0015), Tecnomatix Plant Simulation V2404 (All versions < V2404.0004). The affected applications contain a stack based overflow vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Tecnomatix Plant Simulation V2302 | < V2302.0015 | V2302.0015 |
| Siemens | Tecnomatix Plant Simulation V2404 | < V2404.0004 | V2404.0004 |
Advisories 3
- ICSA-24-256-12 Siemens Tecnomatix Plant Simulation CISA ICS & IT advisories · May 6, 2025
- NCSC-2024-0362 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 10, 2024
- SSA-427715 SSA-427715: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation Siemens ProductCERT · Sep 10, 2024