SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities that could be triggered when the application reads SPP and IGS files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-45601US | high7.8 | — | ||
A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36.0 (All versions < V36.0.169), Tecnomati… | ||||
| CVE-2023-45204US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap… | ||||
| CVE-2023-44087US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap… | ||||
| CVE-2023-44086US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap… | ||||
| CVE-2023-44085US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap… | ||||
| CVE-2023-44084US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap… | ||||
| CVE-2023-44083US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap… | ||||
| CVE-2023-44082US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap… | ||||
| CVE-2023-44081US | high7.8 | — | ||
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected ap… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation - CSAF Versionself
- SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation - HTML Versionself
- SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation - PDF Versionself
- SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation - TXT Versionself
Behebungen (42)
- MitigationParasolid V35.0
Do not open untrusted SPP or IGS files from unknown sources
- MitigationParasolid V35.1
Do not open untrusted SPP or IGS files from unknown sources
- MitigationParasolid V36.0
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2201
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP or IGS files from unknown sources
- MitigationTecnomatix Plant Simulation V2302
Do not open untrusted SPP or IGS files from unknown sources
- BehobenParasolid V35.0
Update to V35.0.262 or later version
https://support.sw.siemens.com/en-US/product/258316782/ - BehobenParasolid V35.1
Update to V35.1.250 or later version
https://support.sw.siemens.com/en-US/product/258316782/ - BehobenParasolid V36.0
Update to V36.0.169 or later version
https://support.sw.siemens.com/en-US/product/258316782/ - BehobenTecnomatix Plant Simulation V2201
Update to V2201.0009 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2201
Update to V2201.0009 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2201
Update to V2201.0009 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2201
Update to V2201.0009 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2201
Update to V2201.0009 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2201
Update to V2201.0009 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2201
Update to V2201.0009 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2201
Update to V2201.0009 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2201
Update to V2201.0009 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2302
Update to V2302.0003 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2302
Update to V2302.0003 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2302
Update to V2302.0003 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2302
Update to V2302.0003 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2302
Update to V2302.0003 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2302
Update to V2302.0003 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2302
Update to V2302.0003 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2302
Update to V2302.0003 or later version
https://support.sw.siemens.com/ - BehobenTecnomatix Plant Simulation V2302
Update to V2302.0003 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan