CVE-2021-27397

Affecting product: Siemens Tecnomatix Plant Simulation (all versions before 16.0.5). Component/trigger: PlantSimCore.dll parsing of SPP files with improper validation. Root cause: memory corruption due to insufficient input validation when processing SPP data. Impact: attacker could execute arbit...

Siemens Tecnomatix Plant Simulation

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Tecnomatix Plant Simulation Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these...