Siemens Tecnomatix Plant Simulation Out-of-Bounds Write Vulnerability (CNVD-2023-75587)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. An out-of-bounds write vulnerability exists in Siemens Tecnomatix Plant Simulation due to an affected application containing an out-of-bounds write beyond the end of an allocated buffer when parsing a specially crafted SPP file. An attacker could use this vulnerability to execute code in the context of the current process.