CVE-2023-37376
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). This vulnerability involves type confusion while parsing STP files, which could allow an attacker to execute code in the context of the current process.
Risk Assessment
This vulnerability poses a risk of malicious code execution, potentially leading to system compromise and data loss. Organizations using these software versions should take immediate action to secure their systems.
Recommendation
It is recommended to update Tecnomatix Plant Simulation to version V2201.0008 or V2302.0002 to mitigate this vulnerability. Additionally, conducting a security audit of systems using this software is advisable.
Other vulnerabilities in Tecnomatix Plant Simulation V2201 (wszystkie wersje < V2201.0008), Tecnomatix Plant Simulation V2302 (wszystkie wersje < V2302.0002)
See all- CVE-2023-38681High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file, which could allow an attacker to execute code in the context of the current process.
- CVE-2023-38680High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file, which could allow an attacker to execute code in the context of the current process.
- CVE-2023-38679High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file, which could allow an attacker to execute code in the context of the current process.
- CVE-2023-37248High
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file, which could allow an attacker to execute code in the context of the current process.
Original NVD description (English source)
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains a type confusion vulnerability while parsing STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21051)