PT-2024-6019 · Siemens · Tecnomatix Plant Simulation

Michael Heinzl · Published 2024-09-10 · Updated 2024-09-14 · CVE-2024-41170

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tecnomatix Plant Simulation V2302 versions prior to V2302.0015 Tecnomatix Plant Simulation V2404 versions prior to V2404.0004

Description A stack-based overflow vulnerability has been identified in the affected applications while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. The vulnerability is related to the parsing of SPP files and can be exploited by opening a specially formed file.

Recommendations For Tecnomatix Plant Simulation V2302 versions prior to V2302.0015, update to version V2302.0015 or later. For Tecnomatix Plant Simulation V2404 versions prior to V2404.0004, update to version V2404.0004 or later. As a temporary workaround, consider avoiding the use of specially crafted SPP files until a patch is available. Restrict access to SPP files to minimize the risk of exploitation.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2024-06829

CVE-2024-41170

Affected Products

Tecnomatix Plant Simulation

References · 9

• https://bdu.fstec.ru/vul/2024-06829 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41170 · Security Note
• https://twitter.com/vuldb/status/1833479546215280831 · Twitter Post
• https://twitter.com/cracbot/status/1835196931108372950 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1833503371719737414 · Twitter Post
• https://t.me/cvedetector/5214 · Telegram Post
• https://cert-portal.siemens.com/productcert/html/ssa-427715.html · Note
• https://t.me/latest_high_impact_cve/1129 · Telegram Post
• https://twitter.com/cracbot/status/1834834568593260823 · Twitter Post