Siemens Tecnomatix Plant Simulation

🗓️ 08 Oct 2024 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 15 Views

Siemens Tecnomatix Plant Simulation ICS security advisory with Out-of-bounds Read and Improper Restriction of Operations vulnerabilitie

Reporter	Title	Published	Views	Family All 84
BDU FSTEC	The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.	26 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.	26 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.	26 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to reading beyond the acceptable range in memory, allows a hacker to execute arbitrary code within the context of the current process.	13 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to reading beyond the acceptable range in memory, allows a hacker to execute arbitrary code within the context of the current process.	13 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to reading beyond the acceptable range in memory, allows a hacker to execute arbitrary code within the context of the current process.	13 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-45463	12 Dec 202411:00	–	circl
Circl	CVE-2024-45464	12 Dec 202411:00	–	circl
Circl	CVE-2024-45465	12 Dec 202411:00	–	circl
Circl	CVE-2024-45466	12 Dec 202411:00	–	circl

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-583523.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-583523.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-284-13.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-284-13
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

08 Oct 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

CVSS 47.3

EPSS0.00176

SSVC