CVE-2023-45204

published 2023-10-10

CVE-2023-45204: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions <…

Priority P3 39 high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21268)

Affected

4 ranges

Vendor	Product	Version range	Fixed in
siemens	tecnomatix	>= 2201 < 2201.0009	2201.0009
siemens	tecnomatix	>= 2302 < 2302.0003	2302.0003
siemens	tecnomatix_plant_simulation_v2201	—	—
siemens	tecnomatix_plant_simulation_v2302	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-704