CVE-2023-44086
Published: 10 October 2023
Summary
CVE-2023-44086 is a high-severity Out-of-bounds Read (CWE-125) vulnerability in Siemens Tecnomatix. Its CVSS base score is 7.8 (High).
Operationally, ranked at the 37.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-48445
Vulnerability details
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain an out of bounds read past the end of an allocated structure while parsing…
more
specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.