CVE-2023-44081: High severity siemens tecnomatix plant simulation vulnerability
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44081?
CVE-2023-44081 has a severity rating of 7.8 (high).
What is the affected software of CVE-2023-44081?
CVE-2023-44081 affects Siemens Tecnomatix V2201 (All versions < V2201.0009) and Tecnomatix V2302 (All versions < V2302.0003).
How does CVE-2023-44081 exploit the vulnerability?
CVE-2023-44081 exploits an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file.
Is there a fix available for CVE-2023-44081?
Siemens has released a security advisory with mitigation steps for CVE-2023-44081.
Where can I find more information about CVE-2023-44081?
More information about CVE-2023-44081 can be found in the Siemens ProductCERT security advisory: https://cert-portal.siemens.com/productcert/pdf/ssa-524778.pdf