SSA-478780

csafDEsiemens_psirt

SSA-478780: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation

Advisory ansehen veröffentlicht 2023-11-14

Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

beschreibt (7)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-38076US——
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),…
CVE-2023-38075UShigh7.8—
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),…
CVE-2023-38074US——
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),…
CVE-2023-38073US——
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),…
CVE-2023-38072US——
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),…
CVE-2023-38071UShigh7.8—
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),…
CVE-2023-38070US——
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (28)

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2201

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • MitigationTecnomatix Plant Simulation V2302

    Do not open untrusted WRL files from using Tecnomatix Plant Simulation

  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0010 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0010 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0010 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0010 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0010 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0010 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2201

    Update to V2201.0010 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0004 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0004 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0004 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0004 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0004 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0004 or later version

    https://support.sw.siemens.com/
  • BehobenTecnomatix Plant Simulation V2302

    Update to V2302.0004 or later version

    https://support.sw.siemens.com/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan