SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011
Tecnomatix Plant Simulation contains an out of bounds write vulnerability that could be triggered when the application reads MODEL files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens has released a new version for Tecnomatix Plant Simulation V2302 and recommends to update to the latest version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-32639US | — | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0011). The affected application contains an out of bounds write past the end of an al… | ||||
references
External citations — patches, advisories, analysis.
- SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 - CSAF Versionself
- SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 - HTML Versionself
- SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 - PDF Versionself
- SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 - TXT Versionself
remediations (2)
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted MODEL files from unknown sources
- FixedTecnomatix Plant Simulation V2302
Update to V2302.0011 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan