MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011

A user could be tricked into opening a malicious MODEL file that crashes Tecnomatix Plant Simulation or executes arbitrary code on their engineering workstation with the user's privileges.

Plant engineers and CAD operators at manufacturing facilities who use Tecnomatix Plant Simulation for 3D plant modeling and virtual commissioning. This includes automotive, heavy equipment, and discrete manufacturing sectors.

An attacker sends a crafted MODEL file to a plant engineer. When the engineer opens the file in Tecnomatix Plant Simulation, a buffer overflow in the file parser allows the attacker to execute commands on the workstation. This could be used to steal design files, modify plant simulation data, or pivot into the plant network.