CVE-2023-44082

Siemens Tecnomatix Plant Simulation is affected by an out-of-bounds write when parsing crafted SPP files in V2201 before 0009 and V2302 before 0003, enabling potential code execution in the current process. Affected components are the Plant Simulation applications themselves, with the root cause ...

CVE-2023-38681

CVE-2023-38681 affects Siemens Tecnomatix Plant Simulation: an out-of-bounds write when parsing IGS files can lead to remote code execution in the context of the current process. Affects V2201 < 2201.0008 and V2302

CVE-2023-38679

CVE-2023-38679 affects Siemens Tecnomatix Plant Simulation: all affected releases are earlier than V2201.0008 and V2302.0002, where an out-of-bounds write occurs while parsing a specially crafted SPP file. The vulnerability can allow code execution in the context of the current process. Affected ...

CVE-2023-38680

CVE-2023-38680 affects Siemens Tecnomatix Plant Simulation: an out-of-bounds write past the end of an allocated buffer during parsing of SPP files could allow code execution in the current process. Affected: Tecnomatix Plant Simulation V2201 (versions before 2201.0008) and V2302 (versions before ...

CVE-2023-45601

CVE-2023-45601 affects Siemens Parasolid (V35.0 up to < V35.0.262; V35.1 < V35.1.250; V36.0 < V36.0.169) and Tecnomatix Plant Simulation (V2201 < V2201.0009; V2302

CVE-2023-44083

Siemens Tecnomatix Plant Simulation is affected by CVE-2023-44083: out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. Affected products are Tecnomatix Plant Simulation V2201 (all versions before V2201.0009) and V2302 (all versions before V2302.0003...

CVE-2023-44081

Siemens Tecnomatix Plant Simulation contains an out-of-bounds write vulnerability in the SPP file parser. Affected products: Tecnomatix Plant Simulation V2201 (all versions prior to V2201.0009) and V2302 (all versions prior to V2302.0003). Root cause: out-of-bounds write past the end of an alloca...

CVE-2023-45204

Siemens Tecnomatix Plant Simulation is affected by a type confusion vulnerability in the IGS file parser for Tecnomatix Plant Simulation V2201 (versions before 2201.0009) and V2302 (before 2302.0003). The issue could allow code execution in the current process. Exploitation details indicate a loc...

CVE-2023-37374

Summary of CVE-2023-37374 (Tecnomatix Plant Simulation): A stack-based buffer overflow occurs when parsing specially crafted STP files in Tecnomatix Plant Simulation. Affected products/versions are Tecnomatix Plant Simulation V2201 (all versions < V2201.0008) and V2302 (all versions

CVE-2023-44086

CVE-2023-44086 (Siemens Tecnomatix Plant Simulation) affects Tecnomatix Plant Simulation V2201 prior to V2201.0009 and V2302 prior to V2302.0003. The issue is an out-of-bounds read past the end of an allocated structure while parsing specially crafted SPP files, enabling code execution in the con...

CVE-2023-37248

Siemens Tecnomatix Plant Simulation PAR file parsing contains an out-of-bounds write (write past end of allocated buffer) that allows arbitrary code execution in the affected process. Root cause: lack of proper validation of PAR data. Affected versions: Tecnomatix Plant Simulation V2201 prior to ...

CVE-2023-44085

Tecnomatix Plant Simulation is affected by an out-of-bounds read/write issue in the SPP file parser. Specifically, CVE-2023-44085 (and related entries) indicate affected versions are V2201 prior to 0009 and V2302 prior to 0003, where parsing a crafted SPP file can lead to code execution in the cu...

CVE-2023-44087

The CVE-2023-44087 vulnerability affects Siemens Tecnomatix Plant Simulation: Tecnomatix Plant Simulation V2201 (all versions before V2201.0009) and V2302 (all versions before V2302.0003). The issue is an out-of-bounds read past the end of an allocated structure while parsing specially crafted SP...

CVE-2023-37376

Tecnomatix Plant Simulation is affected by a type confusion vulnerability while parsing STP files in V2201 prior to 0008 and V2302 prior to 0002. The issue could allow code execution in the process context. Mitigations: upgrade to V2201.0008+ or V2302.0002+; temporary workaround is to restrict ac...

CVE-2023-44084

CVE-2023-44084 affects Siemens Tecnomatix Plant Simulation: V2201 before 2201.0009 and V2302 before 2302.0003 contain an out-of-bounds read past the end of an allocated structure while parsing specially crafted SPP files, enabling code execution in the current process. Mitigation: update Tecnomat...

CVE-2023-41846

The CVE-2023-41846 entry concerns Siemens Tecnomatix Plant Simulation. A memory corruption flaw occurs when parsing specially crafted SPP files, affecting Tecnomatix Plant Simulation V2201 (all versions < V2201.0008) and V2302 (all versions

CVE-2023-37247

Tecnomatix Plant Simulation is affected. Versions prior to V2201.0008 and prior to V2302.0002 are vulnerable to a heap-based buffer overflow when parsing specially crafted PAR files, which could allow code execution in the process context. The issue is confirmed in multiple connected sources (e.g...

CVE-2023-37375

Siemens Tecnomatix Plant Simulation is affected by a stack-based buffer overflow in parsing SPP files. Affected: Plant Simulation V2201 (< V2201.0008) and V2302 (

CVE-2023-37246

Siemens Tecnomatix Plant Simulation is affected by a heap-based buffer overflow in PRT file parsing. Affected versions: Tecnomatix Plant Simulation V2201 before V2201.0008 and V2302 before V2302.0002. Root cause: lack of proper validation of the length of user-supplied data prior to copying it to...