SSA-847261

csafDEsiemens_psirt

SSA-847261: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation

Advisory ansehen veröffentlicht 2023-02-14

Siemens Tecnomatix Plant Simulation has released an update, 2201 Update 6, that fixes multiple vulnerabilities that could be triggered when the application reads SPP files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens recommends to update to the latest version and to avoid opening of untrusted files from unknown sources.

01

beschreibt (28)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-27406US——
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially…
CVE-2023-27405US——
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated…
CVE-2023-27404US——
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially…
CVE-2023-27403US——
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerability while parsing sp…
CVE-2023-27402US——
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated…
CVE-2023-27401US——
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated…
CVE-2023-27400US——
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-27399UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-27398US——
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24996UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24995UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24994UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24993UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24992UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24991UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24990UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24989UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24988UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24987UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
CVE-2023-24986UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate…
20 von 28 angezeigt
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (56)

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • MitigationTecnomatix Plant Simulation

    Do not open untrusted SPP files from unknown sources

  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation

    Update to V2201.0006 or later version

    https://support.sw.siemens.com/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan