CVE-2023-37246
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to heap-based buffer overflow while parsing specially crafted PRT files, which could allow an attacker to execute code in the context of the current process.
Risk Assessment
This vulnerability could lead to remote code execution, posing a significant security risk to systems using this application.
Recommendation
It is recommended to update Tecnomatix Plant Simulation to version V2201.0008 or V2302.0002 and to monitor systems for unauthorized activities.
Other vulnerabilities in Tecnomatix Plant Simulation
See all- CVE-2023-37375High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to stack-based buffer overflow while parsing specially crafted SPP files.
- CVE-2023-37374High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files.
Original NVD description (English source)
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PRT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21109)