Siemens Tecnomatix Plant Simulation

🗓️ 10 Oct 2023 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 39 Views

Siemens Tecnomatix Plant Simulation vulnerabilities, including out-of-bounds write and read, allowing code execution through specially crafted SPP files. CISA will no longer update advisories for these. For more info, see Siemens ProductCERT Security Advisories

Reporter	Title	Published	Views	Family All 86
BDU FSTEC	The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to writing beyond the buffer boundaries of memory, allows a perpetrator to execute arbitrary code.	17 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to writing beyond the buffer boundaries of memory, allows a perpetrator to execute arbitrary code.	17 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.	17 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.	17 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to writing beyond buffer boundaries in memory, allows a perpetrator to execute arbitrary code.	17 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to reading data beyond the buffer in memory, allows a perpetrator to execute arbitrary code.	21 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to reading beyond the buffer limit of memory, allows a perpetrator to execute arbitrary code.	25 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-44081	10 Oct 202314:30	–	circl
Circl	CVE-2023-44082	10 Oct 202314:30	–	circl
Circl	CVE-2023-44083	10 Oct 202314:30	–	circl

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-524778.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-524778.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-524778.pdf
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-524778.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-285-10.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-285-10
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

10 Oct 2023 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.8

EPSS0.00166

SSVC