CVE-2023-38679 PUBLISHED CVSS 7.800000190734863 HIGH

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21106)

EPSS 0.07% · 20.9th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
EPSS Score
0.07%
20.9th percentile

Affected Products

VendorProductVersions
SiemensTecnomatix Plant Simulation V2302All versions < V2302.0002
SiemensTecnomatix Plant Simulation V2201All versions < V2201.0008
siemenstecnomatix2201, 2302

Timeline

References

Open in Interactive Console →