
CVE-2024-45466
https://notcve.org/view.php?id=CVE-2024-45466
08 Oct 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V... • https://cert-portal.siemens.com/productcert/html/ssa-583523.html • CWE-125: Out-of-bounds Read •

CVE-2024-45465
https://notcve.org/view.php?id=CVE-2024-45465
08 Oct 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V... • https://cert-portal.siemens.com/productcert/html/ssa-583523.html • CWE-125: Out-of-bounds Read •

CVE-2024-45464
https://notcve.org/view.php?id=CVE-2024-45464
08 Oct 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V... • https://cert-portal.siemens.com/productcert/html/ssa-583523.html • CWE-125: Out-of-bounds Read •

CVE-2024-45463
https://notcve.org/view.php?id=CVE-2024-45463
08 Oct 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V... • https://cert-portal.siemens.com/productcert/html/ssa-583523.html • CWE-125: Out-of-bounds Read •

CVE-2024-41170
https://notcve.org/view.php?id=CVE-2024-41170
10 Sep 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0015), Tecnomatix Plant Simulation V2404 (All versions < V2404.0004). The affected applications contain a stack based overflow vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. • https://cert-portal.siemens.com/productcert/html/ssa-427715.html • CWE-121: Stack-based Buffer Overflow •

CVE-2024-32639 – Siemens Tecnomatix Plant Simulation MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-32639
14 May 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0011). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted MODEL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-22974) Se ha identificado una vulnerabilidad en Tecnomatix Plant Simulation V2302 (Todas las versiones < V2302.0011). La aplicación afectada contiene una escritura fuera de lo... • https://cert-portal.siemens.com/productcert/html/ssa-923361.html • CWE-787: Out-of-bounds Write •

CVE-2024-23804
https://notcve.org/view.php?id=CVE-2024-23804
13 Feb 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected applications contain a stack overflow vulnerability while parsing specially crafted PSOBJ files. This could allow an attacker to execute code in the context of the current process. Se ha identificado una vulnerabilidad en Tecnomatix Plant Simulation V2201 (Todas las versiones < V2201.0012), Tecnomatix Plant Simulation V2302 (Toda... • https://cert-portal.siemens.com/productcert/html/ssa-017796.html • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •

CVE-2024-23803
https://notcve.org/view.php?id=CVE-2024-23803
13 Feb 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. Se ha identificado una vulnerabilidad en Tecnomatix Plant Simulation V2201 (Todas las versiones), Tecnomatix Plant Simulation V2302 (Todas ... • https://cert-portal.siemens.com/productcert/html/ssa-017796.html • CWE-787: Out-of-bounds Write •

CVE-2024-23802
https://notcve.org/view.php?id=CVE-2024-23802
13 Feb 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. Se ha identificado una vulnerabilidad en Tecnomatix Plant Simulation V2201 (Todas las versiones < V2201.0012), Tecnomatix ... • https://cert-portal.siemens.com/productcert/html/ssa-017796.html • CWE-125: Out-of-bounds Read •

CVE-2024-23801
https://notcve.org/view.php?id=CVE-2024-23801
13 Feb 2024 — A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted SPP files. An attacker could leverage this vulnerability to crash the application causing denial of service condition. Se ha identificado una vulnerabilidad en Tecnomatix Plant Simulation V2201 (Todas las versiones), Tecnomatix Plant Simulation V2302 (T... • https://cert-portal.siemens.com/productcert/html/ssa-017796.html • CWE-476: NULL Pointer Dereference •