PT-2024-4294 · Siemens · Tecnomatix Plant Simulation
Published
2024-05-14
·
Updated
2024-06-10
·
CVE-2024-32639
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Tecnomatix Plant Simulation versions prior to V2302.0011
Description
The issue is related to an out of bounds write past the end of an allocated buffer while parsing a specially crafted MODEL file. This could allow an attacker to execute code in the context of the current process. The vulnerability is associated with the recording of data beyond the buffer boundaries in memory and can be exploited by opening a specially formed MODEL file, potentially allowing an attacker to execute arbitrary code.
Recommendations
For versions prior to V2302.0011, update to version V2302.0011 or later to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted MODEL files until a patch is applied. Restrict access to the MODEL file parsing functionality to minimize the risk of exploitation.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tecnomatix Plant Simulation