CVE-2023-37374
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files.
Risk Assessment
An attacker could exploit this vulnerability to execute code in the context of the current process, posing a significant security risk to the system.
Recommendation
It is recommended to update to version V2201.0008 or V2302.0002 to mitigate this vulnerability.
Other vulnerabilities in Tecnomatix Plant Simulation
See all- CVE-2023-37375High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to stack-based buffer overflow while parsing specially crafted SPP files.
- CVE-2023-37246High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to heap-based buffer overflow while parsing specially crafted PRT files, which could allow an attacker to execute code in the context of the current process.
- CVE-2023-27406High
A vulnerability in Tecnomatix Plant Simulation (versions < V2201.0006) is vulnerable to a stack-based buffer overflow while parsing specially crafted SPP files. An attacker could leverage this to execute code in the context of the current process.
- CVE-2023-27405High
Tecnomatix Plant Simulation versions prior to V2201.0006 contain an out-of-bounds read past the end of an allocated structure when parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.
- CVE-2023-27404High
Tecnomatix Plant Simulation (All versions < V2201.0006) is vulnerable to a stack-based buffer overflow while parsing specially crafted SPP files. An attacker could leverage this to execute code in the context of the current process.
- CVE-2023-27403High
Tecnomatix Plant Simulation versions prior to V2201.0006 contain a memory corruption vulnerability when parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.
- CVE-2023-27402High
Tecnomatix Plant Simulation versions prior to V2201.0006 contain an out-of-bounds read past the end of an allocated structure when parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.
- CVE-2023-27401High
A vulnerability in Tecnomatix Plant Simulation (versions < V2201.0006) contains an out-of-bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.
- CVE-2023-27400High
A vulnerability in Tecnomatix Plant Simulation (versions < V2201.0006) contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process.
- CVE-2023-24996High
A vulnerability in Tecnomatix Plant Simulation (all versions < V2201.0006) involving an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process.
Original NVD description (English source)
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21054)
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

