Siemens Tecnomatix Plant Simulation Out-of-Bounds Read Vulnerability (CNVD-2023-75582)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from an out-of-bounds read vulnerability due to an affected application containing an out-of-bounds read beyond the end of the allocation structure when parsing a specially crafted SPP file. An attacker could use this vulnerability to execute code in the context of the current process.