CVE-2023-38681

published 2023-08-08

CVE-2023-38681: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions <…

Priority P3 38 high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21270)

Affected

4 ranges

Vendor	Product	Version range	Fixed in
siemens	tecnomatix	>= 2201 < 2201.0008	2201.0008
siemens	tecnomatix	>= 2302 < 2302.0002	2302.0002
siemens	tecnomatix_plant_simulation_v2201	—	—
siemens	tecnomatix_plant_simulation_v2302	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-787