What is CVE-2023-41846?

CVE-2023-41846 is a high-severity vulnerability in Siemens Tecnomatix, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2023-09-12.

How severe is CVE-2023-41846?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Siemens Tecnomatix

CVE-2023-41846

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to memory corruption while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (10.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Siemens Tecnomatix
Siemens Tecnomatix Plant Simulation V2201 — versions All versions < V2201.0008
Siemens Tecnomatix Plant Simulation V2302 — versions All versions < V2302.0002

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

productcert@siemens.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-41846?: CVE-2023-41846 is a high-severity vulnerability in Siemens Tecnomatix, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2023-09-12.
How severe is CVE-2023-41846?: High severity. CVSS v3 base score is 7.8 out of 10.