ICSA-24-046-07

icsaUScisa_csaf_ot

Siemens Tecnomatix Plant Simulation

Advisory ansehen veröffentlicht 2024-02-13

Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL, PSOBJ or SPP file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (10)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-23804US——
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected ap…
CVE-2024-23803US——
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected application con…
CVE-2024-23802US——
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected ap…
CVE-2024-23801USmedium5.5—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected applications co…
CVE-2024-23800USmedium5.5—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected applications co…
CVE-2024-23799USmedium5.5—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected applications co…
CVE-2024-23798US——
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected ap…
CVE-2024-23797US——
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected ap…
CVE-2024-23796US——
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected ap…
CVE-2024-23795US——
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected ap…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (40)

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL, PSOBJ, or SPP files from using Tecnomatix Plant Simulation

  • Kein Fix geplantTecnomatix Plant Simulation V2201

    Currently no fix is planned

  • Kein Fix geplantTecnomatix Plant Simulation V2201

    Currently no fix is planned

  • Kein Fix geplantTecnomatix Plant Simulation V2201

    Currently no fix is planned

  • Kein Fix geplantTecnomatix Plant Simulation V2201

    Currently no fix is planned

  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0012 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0012 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0012 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0012 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0012 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0012 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0007 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0007 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0007 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0007 or later version

    https://support.sw.siemens.com/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan