CVE-2023-37248
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file, which could allow an attacker to execute code in the context of the current process.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update Tecnomatix Plant Simulation to version V2201.0008 or V2302.0002 to mitigate this vulnerability.
Other vulnerabilities in Tecnomatix Plant Simulation V2201 (wszystkie wersje < V2201.0008), Tecnomatix Plant Simulation V2302 (wszystkie wersje < V2302.0002)
See all- CVE-2023-38681High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file, which could allow an attacker to execute code in the context of the current process.
- CVE-2023-38680High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file, which could allow an attacker to execute code in the context of the current process.
- CVE-2023-38679High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file, which could allow an attacker to execute code in the context of the current process.
- CVE-2023-37376High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). This vulnerability involves type confusion while parsing STP files, which could allow an attacker to execute code in the context of the current process.
Original NVD description (English source)
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21155)