Siemens Tecnomatix Plant Simulation Out-of-Bounds Write Vulnerability (CNVD-2023-71240)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. The power of discrete-event simulation is used to analyze and optimize throughput and thus improve manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from an out-of-bounds write vulnerability that arises from parsing a specially crafted SPP file that contains an out-of-bounds write beyond the end of the allocated buffer. An attacker could use this vulnerability to execute code in the context of the current process.