Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation Before V2302.0018 and V2404.0007

An attacker could craft a malicious WRL file that, when opened in Tecnomatix Plant Simulation, causes the application to crash or execute arbitrary code with the privileges of the user running the application.

This vulnerability affects engineering and manufacturing professionals who use Siemens Tecnomatix Plant Simulation for factory layout design and simulation. At utilities and municipal plants, this may include planning and asset management teams who design or maintain facility layouts, as well as training departments that use simulations. The primary risk is to workstations and engineering networks rather than production OT systems, unless these workstations are used to configure or control real plant equipment.

An attacker sends a crafted WRL (VRML) file to a Tecnomatix user via email or file sharing. When the user opens the file in Plant Simulation, the application's WRL parser processes the malicious content, triggering a buffer overflow or use-after-free condition that could crash the application or allow code execution on the workstation.