Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in SPP file format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-41170US | — | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0015), Tecnomatix Plant Simulation V2404 (All versions < V2404.0004). The affected ap… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-427715: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation - CSAF Versionself
- SSA-427715: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation - HTML Versionself
- ICS Advisory ICSA-24-256-12 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-256-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP files in affected applications
- MitigationTecnomatix Plant Simulation V2404
Do not open untrusted SPP files in affected applications
- BehobenTecnomatix Plant Simulation V2302
Update to V2302.0015 or later version
- BehobenTecnomatix Plant Simulation V2404
Update to V2404.0004 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan