ICSA-23-285-10

icsaUScisa_csaf_ot

Siemens Tecnomatix Plant Simulation

Advisory ansehen veröffentlicht 2023-10-10

Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities that could be triggered when the application reads SPP and IGS files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

beschreibt (9)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-45601UShigh7.8—
A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36.0 (All versions < V36.0.169), Tecnomati…
CVE-2023-45204UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap…
CVE-2023-44087UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap…
CVE-2023-44086UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap…
CVE-2023-44085UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap…
CVE-2023-44084UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap…
CVE-2023-44083UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap…
CVE-2023-44082UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap…
CVE-2023-44081UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (42)

  • MitigationParasolid V35.0

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationParasolid V35.1

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationParasolid V36.0

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted SPP or IGS files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted SPP or IGS files from unknown sources

  • BehobenParasolid V35.0

    Update to V35.0.262 or later version

    https://support.sw.siemens.com/en-US/product/258316782/
  • BehobenParasolid V35.1

    Update to V35.1.250 or later version

    https://support.sw.siemens.com/en-US/product/258316782/
  • BehobenParasolid V36.0

    Update to V36.0.169 or later version

    https://support.sw.siemens.com/en-US/product/258316782/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0009 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0009 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0009 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0009 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0009 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0009 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0009 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0009 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0009 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0003 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0003 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0003 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0003 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0003 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0003 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0003 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0003 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0003 or later version

    https://support.sw.siemens.com/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan