Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in SPP file format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41170US | — | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0015), Tecnomatix Plant Simulation V2404 (All versions < V2404.0004). The affected ap… | ||||
references
External citations — patches, advisories, analysis.
- SSA-427715: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation - CSAF Versionself
- SSA-427715: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation - HTML Versionself
- ICS Advisory ICSA-24-256-12 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-256-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP files in affected applications
- MitigationTecnomatix Plant Simulation V2404
Do not open untrusted SPP files in affected applications
- FixedTecnomatix Plant Simulation V2302
Update to V2302.0015 or later version
- FixedTecnomatix Plant Simulation V2404
Update to V2404.0004 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan