A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20308, ZDI-CAN-20345)
Advisories
Source ID Title
EUVD EUVD EUVD-2023-31177 A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20308, ZDI-CAN-20345)
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 04 Mar 2025 03:45:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2025-02-27T16:21:56.336Z

Reserved: 2023-03-01T09:12:05.531Z

Link: CVE-2023-27401

cve-icon Vulnrichment

Updated: 2024-08-02T12:09:43.355Z

cve-icon NVD

Status : Modified

Published: 2023-03-14T10:15:29.143

Modified: 2024-11-21T07:52:50.367

Link: CVE-2023-27401

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.