SSA-764801

csafDEsiemens_psirt

SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation

Advisory ansehen veröffentlicht 2023-07-11

Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities that could be triggered when the application reads PAR, SPP, STP and PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

beschreibt (10)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-41846UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
CVE-2023-38681UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
CVE-2023-38680UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
CVE-2023-38679UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
CVE-2023-37376UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
CVE-2023-37375UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
CVE-2023-37374UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
CVE-2023-37248UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
CVE-2023-37247UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
CVE-2023-37246UShigh7.8—
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected ap…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (40)

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted PAR, SPP, STP or PRT files from unknown sources

  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0008 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0002 or later version

    https://support.sw.siemens.com/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan