CVE-2024-23801

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions, Tecnomatix Plant Simulation V2302 All versions V2302.0007. The affected applications contain a null pointer dereference vulnerability while parsing specially crafted SPP files. An attacker could leverage this...

Stack overflow

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0012, Tecnomatix Plant Simulation V2302 All versions V2302.0006. The affected applications contain a stack overflow vulnerability while parsing specially crafted PSOBJ files. This could allow an attacker t...

CVE-2024-23799

CVE-2024-23799 describes a null pointer dereference in Siemens Tecnomatix Plant Simulation when parsing specially crafted SPP files, affecting V2201 (All versions) and V2302 (All versions before 2302.0007). Impact is crash leading to denial of service; no remote exploitation information is provid...

PT-2024-2692 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation V2201 All versions Tecnomatix Plant Simulation V2302 versions prior to V2302.0007 Description: A null pointer dereference vulnerability has been identified in the affected applications while parsing specially craft...

Out-of-bounds

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. Th...

CVE-2023-45204

Siemens Tecnomatix Plant Simulation is affected by a type confusion vulnerability in the IGS file parser for Tecnomatix Plant Simulation V2201 (versions before 2201.0009) and V2302 (before 2302.0003). The issue could allow code execution in the current process. Exploitation details indicate a loc...

CVE-2023-44082

Siemens Tecnomatix Plant Simulation is affected by an out-of-bounds write when parsing crafted SPP files in V2201 before 0009 and V2302 before 0003, enabling potential code execution in the current process. Affected components are the Plant Simulation applications themselves, with the root cause ...

CVE-2023-37247

Tecnomatix Plant Simulation is affected. Versions prior to V2201.0008 and prior to V2302.0002 are vulnerable to a heap-based buffer overflow when parsing specially crafted PAR files, which could allow code execution in the process context. The issue is confirmed in multiple connected sources (e.g...