A vulnerability was found in Siemens Tecnomatix Plant Simulation (version now known). It has been classified as critical. This affects some unknown processing of the component PAR File Handler. The manipulation with an unknown input leads to a heap-based overflow vulnerability. CWE is classifying the issue as CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21138)

The weakness was disclosed 07/11/2023 as ssa-764801. It is possible to read the advisory at cert-portal.siemens.com. This vulnerability is uniquely identified as CVE-2023-37247 since 06/29/2023. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/11/2023).

Upgrading eliminates this vulnerability.

Productinfo

Type

• SCADA Software

Vendor

• Siemens

Name

• Tecnomatix Plant Simulation

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion