Siemens Tecnomatix Plant Simulation Out-of-Bounds Reading Vulnerability (CNVD-2023-18935)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens (Germany). An out-of-bounds read vulnerability exists in versions prior to Siemens Tecnomatix Plant Simulation V2201.0006, which stems from an out-of-bounds read beyond the end of the allocated structure when parsing a specially crafted SPP file, and can be exploited by an attacker to Execute code in the context of the current process.