CVE-2021-27397

Affecting product: Siemens Tecnomatix Plant Simulation (all versions before 16.0.5). Component/trigger: PlantSimCore.dll parsing of SPP files with improper validation. Root cause: memory corruption due to insufficient input validation when processing SPP data. Impact: attacker could execute arbit...

CVE-2021-27398

Tecnomatix Plant Simulation (all versions

Siemens Tecnomatix Plant Simulation Buffer Error Vulnerability

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. The power of discrete-event simulation is used to analyze and optimize throughput and thus improve manufacturing system performance. A buffer error vulnerability exists in Tecnomatix Plant Simulation versio...

siemens Tecnomatix RobotExpert 安全漏洞

siemens Tecnomatix RobotExpert is a software application from Siemens, Germany. It provides support for unique industry applications such as mounting, arc welding, polishing, gluing and others. A security vulnerability exists in siemens Tecnomatix RobotExpert. The vulnerability stems from the...

Siemens Tecnomatix Plant Simulation 安全漏洞

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. It uses the power of discrete-event simulation to analyze and optimize throughput and thereby improve manufacturing system performance. A security vulnerability exists in Tecnomatix Plant Simulation. The...

Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. The power of discrete-event simulation is used to analyze and optimize throughput and thus improve manufacturing system performance. A buffer error vulnerability exists in Tecnomatix Plant Simulation versio...

Siemens Tecnomatix Plant Simulation

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Tecnomatix Plant Simulation Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these...

Stopping Carbanak+FIN7: How Microsoft led in the MITRE Engenuity® ATT&CK® Evaluation

In MITRE Engenuity’s recent Carbanak+FIN7 ATT&CK Evaluation, Microsoft demonstrated that we can stop advanced, real-world attacks by threat actor groups with our industry-leading security capabilities. In this year’s evaluation, we engaged our unified Microsoft 365 Defender stack, with...

Delta Electronics CNCSoft-B 缓冲区错误漏洞

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics, China. The software provides high-performance motion control, rich human-machine interface functions, user-friendly operation, high stability to meet the needs of high-speed cutting, and good flexibili...

vulhub

This is an open-source collection of pre-built vulnerable docker environments. It is a toolkit for defensive blue-team research and threat mitigation, providing a platform for testing and analyzing vulnerabilities in a controlled environment. The repository contains a variety of vulnerable...

Shanghai Dream Road Digital Technology Co., Ltd. medical virtual simulation teaching experiment platform exists file upload leakage

Medical virtual simulation teaching experiment platform is a virtual reality system with computer virtual reality and digital simulation technology as the core, biosimulation engine, processing factor database, virtual environment interface and other technologies as the support. Shanghai Dream Ro...

Gamifying machine learning for stronger security and AI models

To stay ahead of adversaries, who show no restraint in adopting tools and techniques that can help them attain their goals, Microsoft continues to harness AI and machine learning to solve security challenges. One area we’ve been experimenting on is autonomous systems. In a simulated enterprise...

File Containment Vulnerability in Medical Virtual Simulation Teaching Experiment Platform of Shanghai Dream Road Digital Technology Co.

Shanghai Dream Road Digital Technology Co., Ltd. is engaged in medical virtual simulation teaching software research and development and medical big data mining software research and development has been more than 10 years of experience, from a technology research and development and product...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.24), ai.hyacinth.framework:core-service-discovery-server (>=0.5.0 <=0.5.24) +5662 more potentially affected by CVE-2021-21343 via com.thoughtworks.xstream:xstream (>=1.1.1 <=1.4.15)

com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =Finchley.SR4, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =0.3.3, =0.4.0, =0.4.2 and more Source cves: CVE-2021-21343 Source advisory: OSV:GHSA-74CV-F58X-F9WF...

Siemens SIMATIC S7-PLCSIM Infinite Loop Vulnerability

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A security vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker could exploit the vulnerability to cause a...

Microsoft unifies SIEM and XDR to help stop advanced attacks

For all of us in security, the last twelve months have been an incredible series of challenges—from balancing remote work with family priorities, to helping build resilient businesses, and protecting against the latest attacks. 2020 showed us that while we have made great progress, there is still...

SIMATIC S7-PLCSM suffers from a denial of service vulnerability (CNVD-2021-05558)

SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

SIMATIC S7-PLCSM suffers from a Denial of Service Vulnerability

SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Delta Electronics CNCSoft-B 安全漏洞

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics, China. A security vulnerability exists in Delta Electronics CNCSoft-B, which can be exploited by an attacker to execute arbitrary code...

Delta Electronics CNCSoft-B 代码问题漏洞

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics, China. A buffer overflow vulnerability exists in CNCSoft-B Versions, which is caused by a null pointer error and can be exploited by an attacker to execute arbitrary code...