Multiple File Parsing Vulnerabilities in Tecnomatix Plant Simulation

An attacker who tricks a plant engineer into opening a malicious design or model file could crash the simulation software or run arbitrary code on the engineering workstation, potentially allowing access to plant configuration data or other systems on the network.

This affects manufacturing and process engineering teams who use Tecnomatix Plant Simulation for virtual plant modeling and digital twin development. Risk is highest for users who receive design files or model libraries from external sources, contractors, or untrusted repositories. Engineering workstations running affected versions are at risk.

An attacker crafts a malicious WRL, PSOBJ, or SPP file (common 3D model and plant layout formats) and sends it to a plant engineer via email, file sharing, or a compromised repository. When the engineer opens the file in Tecnomatix Plant Simulation, the vulnerable parser triggers a buffer overflow or null pointer dereference, crashing the app or executing attacker code with the user's privileges.