OTPulse
FeedAboutContact

Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation

Plan Patch7.8SSA-847261Feb 14, 2023
Attack VectorLocal
Auth RequiredNone
ComplexityLow
User InteractionRequired
Summary

Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities in SPP file parsing (CWE-824, CWE-787, CWE-125, CWE-119, CWE-121) that could allow arbitrary code execution or denial of service. When a user opens a malicious SPP file, buffer overflow or out-of-bounds memory access conditions can be triggered, potentially leading to application crash or execution of arbitrary code on the host system.

What this means
What could happen
An attacker could craft a malicious SPP (Tecnomatix Plant Simulation project) file that, when opened by a user, crashes the application or executes arbitrary code on the engineering workstation.
Who's at risk
Engineering and planning staff who use Siemens Tecnomatix Plant Simulation for manufacturing simulation and process design. This affects simulation workstations running versions before 2201.0006.
How it could be exploited
An attacker sends a malicious SPP file to a plant engineer via email or file sharing. When the engineer opens the file in Tecnomatix Plant Simulation, the parser encounters a buffer overflow or out-of-bounds memory access, leading to a crash or code execution on the workstation.
Prerequisites
  • User with access to Tecnomatix Plant Simulation
  • User must be tricked into opening a malicious SPP file
  • Affected version of Plant Simulation must be installed (< V2201.0006)
User interaction required (file must be opened)Buffer overflow/memory corruption vulnerabilitiesAffects engineering workstations that design and validate manufacturing processes
Exploitability
Low exploit probability (EPSS 0.5%)
Affected products (1)
ProductAffected VersionsFix Status
Tecnomatix Plant Simulation< V2201.00062201.0006
Remediation & Mitigation
0/3
Do now
0/1
HARDENINGTrain users to avoid opening SPP files from untrusted or unknown sources
Schedule — requires maintenance window
0/1

Patching may require device reboot — plan for process interruption

HOTFIXUpdate Tecnomatix Plant Simulation to version 2201.0006 or later
Long-term hardening
0/1
HARDENINGImplement file transfer controls to restrict SPP files from external email or file sharing sources until scanned
View full Siemens ProductCERT advisory
↑↓ Navigate · Esc Close
API: /api/v1/advisories/118310aa-e1d6-4106-96ad-2091c2ed2b96