SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities that could be triggered when the application reads PAR, SPP, STP and PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-41846US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
| CVE-2023-38681US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
| CVE-2023-38680US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
| CVE-2023-38679US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
| CVE-2023-37376US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
| CVE-2023-37375US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
| CVE-2023-37374US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
| CVE-2023-37248US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
| CVE-2023-37247US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
| CVE-2023-37246US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap… | ||||
references
External citations — patches, advisories, analysis.
- SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation - CSAF Versionself
- SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation - HTML Versionself
- SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation - PDF Versionself
- SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation - TXT Versionself
remediations (40)
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted PAR, SPP, STP or PRT files from unknown sources
- FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2201
Update to V2201.0008 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/ - FixedTecnomatix Plant Simulation V2302
Update to V2302.0002 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan