Siemens Tecnomatix Plant Simulation Stack-Based Buffer Overflow (SSA-427715)

Key Information Vulnerability Description Vulnerability ID: SSA-427715 Vulnerability Type: Stack-Based Buffer Overflow Vulnerability Affected Product: Tecnomatix Plant Simulation Affected Versions: - V2302 < V2302.0015 - V2404 < V2404.0004 Vulnerability Impact CVSS v3.1 Base Score: 7.8 CVSS v4.0 Base Score: 7.3 Solution Affected Products and Versions: - Tecnomatix Plant Simulation V2302: Upgrade to V2302.0015 or later - Tecnomatix Plant Simulation V2404: Upgrade to V2404.0004 or later Workarounds and Mitigations Workarounds and Mitigations: - CVE-2024-41170: Do not open untrusted SPP files within the affected application General Security Recommendations General Security Recommendations: - Configure the environment in accordance with Siemens’ industrial security operational guidelines - Follow recommendations provided in the product manual Product Description Product Description: - Tecnomatix Plant Simulation: Software used for simulating industrial processes Vulnerability Details Vulnerability Details: - Description: The application contains a stack overflow vulnerability when parsing specially crafted SPP files, allowing an attacker to execute code in the current context. Authentication Authentication: - Vulnerability Reporter: Michael Heinzl Additional Information Additional Information: - Contact Siemens ProductCERT: https://www.siemens.com/cert/advisories Historical Data Historical Data: - Release Date: 2024-09-10 Terms and Usage Terms and Usage: - Siemens Security Advisories are subject to the underlying license terms or other applicable agreements previously negotiated with Siemens. Where applicable, information, software, or documentation provided in the Siemens Security Advisory shall be governed by the Terms and Conditions of Use on the Siemens global website, particularly Sections 8–10. In case of conflict, license terms shall take precedence over Terms and Conditions of Use.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens Tecnomatix Plant Simulation Stack-Based Buffer Overflow (SSA-427715)