SSA-017796 V1.0: Multiple File Parsing Vulnerabilities in Tecnomatix Plant Simulation

Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL, PSOBJ or SPP file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes …

application crash file files malicious parsing products siemens simulation ssa vulnerabilities