Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation has released an update for version V16.0 that fixes multiple vulnerabilities that could be triggered when the application reads SPP files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the target host system. Siemens recommends to update to the latest version and to avoid opening of untrusted files from unknown sources.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-27398US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing… | ||||
| CVE-2021-27397US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing… | ||||
| CVE-2021-27396US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-983548: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation - CSAF Versionself
- SSA-983548: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation - PDF Versionself
- SSA-983548: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation - TXT Versionself
- ICS Advisory ICSA-21-131-08 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-131-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationTecnomatix Plant Simulation
Do not open untrusted SPP files from unknown sources
- MitigationTecnomatix Plant Simulation
Do not open untrusted SPP files from unknown sources
- MitigationTecnomatix Plant Simulation
Do not open untrusted SPP files from unknown sources
- BehobenTecnomatix Plant Simulation
Update to V16.0.5 or later version
- BehobenTecnomatix Plant Simulation
Update to V16.0.5 or later version
- BehobenTecnomatix Plant Simulation
Update to V16.0.5 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan