CVE-2023-37374
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files.
Risk Assessment
An attacker could exploit this vulnerability to execute code in the context of the current process, posing a significant security risk to the system.
Recommendation
It is recommended to update to version V2201.0008 or V2302.0002 to mitigate this vulnerability.
Other vulnerabilities in Tecnomatix Plant Simulation
See all- CVE-2023-37375High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to stack-based buffer overflow while parsing specially crafted SPP files.
- CVE-2023-37246High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to heap-based buffer overflow while parsing specially crafted PRT files, which could allow an attacker to execute code in the context of the current process.
Original NVD description (English source)
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21054)