CVE-2023-45204

Siemens Tecnomatix Plant Simulation is affected by a type confusion vulnerability in the IGS file parser for Tecnomatix Plant Simulation V2201 (versions before 2201.0009) and V2302 (before 2302.0003). The issue could allow code execution in the current process. Exploitation details indicate a loc...

CVE-2023-45204

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

CVE-2023-45204

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

CVE-2023-45601: Stack-based Buffer Overflow

A vulnerability has been identified in Parasolid V35.0 All versions V35.0.262, Parasolid V35.1 All versions V35.1.250, Parasolid V36.0 All versions V36.0.169, Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected...

PT-2023-29457

Name of the Vulnerable Software and Affected Versions Tecnomatix Plant Simulation V2201 versions prior to V2201.0009 Tecnomatix Plant Simulation V2302 versions prior to V2302.0003 Description A type confusion vulnerability has been identified in the affected applications while parsing specially...

PT-2023-29582

Name of the Vulnerable Software and Affected Versions Parasolid versions prior to V35.0.262 Parasolid versions prior to V35.1.250 Parasolid versions prior to V36.0.169 Tecnomatix Plant Simulation versions prior to V2201.0009 Tecnomatix Plant Simulation versions prior to V2302.0003 Description A...

CVE-2023-45204: Incorrect Type Conversion or Cast

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

The vulnerability of the software environment of the Tecnomatix Plant Simulation model lies in the ability to write data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software environment for simulation modeling of systems and processes in Tecnomatix Plant Simulation lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created IGS file...

Siemens Tecnomatix Plant Simulation Out-of-Bounds Write Vulnerability (CNVD-2023-71239)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. The power of discrete-event simulation is used to analyze and optimize throughput and thus improve manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from an out-of-bounds write...

CVE-2023-38681

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file. Thi...

Design/Logic Flaw

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file. Thi...

CVE-2023-38681

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file. Thi...

CVE-2023-38681

CVE-2023-38681 affects Siemens Tecnomatix Plant Simulation: an out-of-bounds write when parsing IGS files can lead to remote code execution in the context of the current process. Affects V2201 < 2201.0008 and V2302

CVE-2023-38681

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file. Thi...

CVE-2023-38681: Out-of-bounds Write

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file. Thi...

PT-2023-24800 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...

PT-2023-25288 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required, as the target must visit a...

(0Day) Ashlar-Vellum Cobalt Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

(0Day) Ashlar-Vellum Cobalt IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

CVE-2022-41178: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly .igs, .iges, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable t...