ID

VAR-202307-0575


CVE

CVE-2023-37247


TITLE

Siemens'  tecnomatix  Out-of-bounds write vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2023-021710

DESCRIPTION

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21138). Siemens' tecnomatix Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of PAR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. Siemens Tecnomatix Plant Simulation is an industrial control device of Siemens, Germany. It uses discrete event simulation to analyze and optimize production volume, thereby improving the performance of manufacturing systems

Trust: 2.88

sources: NVD: CVE-2023-37247 // JVNDB: JVNDB-2023-021710 // ZDI: ZDI-23-1556 // CNVD: CNVD-2023-56538 // VULMON: CVE-2023-37247

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2023-56538

AFFECTED PRODUCTS

vendor:siemensmodel:tecnomatixscope:ltversion:2201.0008

Trust: 1.0

vendor:siemensmodel:tecnomatixscope:gteversion:2201

Trust: 1.0

vendor:siemensmodel:tecnomatixscope:gteversion:2302

Trust: 1.0

vendor:siemensmodel:tecnomatixscope:ltversion:2302.0002

Trust: 1.0

vendor:シーメンスmodel:tecnomatixscope:eqversion: -

Trust: 0.8

vendor:シーメンスmodel:tecnomatixscope:eqversion:2302 that's all 2302.0002

Trust: 0.8

vendor:シーメンスmodel:tecnomatixscope:eqversion:2201 that's all 2201.0008

Trust: 0.8

vendor:シーメンスmodel:tecnomatixscope: - version: -

Trust: 0.8

vendor:siemensmodel:tecnomatix plant simulationscope: - version: -

Trust: 0.7

vendor:siemensmodel:tecnomatix plant simulationscope:eqversion:v2201<v2201.0008

Trust: 0.6

vendor:siemensmodel:tecnomatix plant simulationscope:eqversion:v2302<v2302.0002

Trust: 0.6

sources: ZDI: ZDI-23-1556 // CNVD: CNVD-2023-56538 // JVNDB: JVNDB-2023-021710 // NVD: CVE-2023-37247

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2023-37247
value: HIGH

Trust: 1.0

productcert@siemens.com: CVE-2023-37247
value: HIGH

Trust: 1.0

NVD: CVE-2023-37247
value: HIGH

Trust: 0.8

ZDI: CVE-2023-37247
value: HIGH

Trust: 0.7

CNVD: CNVD-2023-56538
value: HIGH

Trust: 0.6

CNNVD: CNNVD-202307-728
value: HIGH

Trust: 0.6

CNVD: CNVD-2023-56538
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2023-37247
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 2.0

NVD: CVE-2023-37247
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

ZDI: CVE-2023-37247
baseSeverity: HIGH
baseScore: 7.8
vectorString: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.0

Trust: 0.7

sources: ZDI: ZDI-23-1556 // CNVD: CNVD-2023-56538 // JVNDB: JVNDB-2023-021710 // CNNVD: CNNVD-202307-728 // NVD: CVE-2023-37247 // NVD: CVE-2023-37247

PROBLEMTYPE DATA

problemtype:CWE-122

Trust: 1.0

problemtype:CWE-787

Trust: 1.0

problemtype:Out-of-bounds writing (CWE-787) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2023-021710 // NVD: CVE-2023-37247

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202307-728

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202307-728

PATCH

title:Siemens has issued an update to correct this vulnerability.url:https://cert-portal.siemens.com/productcert/html/ssa-764801.html

Trust: 0.7

title:Patch for Siemens Tecnomatix Plant Simulation Heap Buffer Overflow Vulnerability (CNVD-2023-56538)url:https://www.cnvd.org.cn/patchInfo/show/443056

Trust: 0.6

title:Siemens Tecnomatix Plant Simulation Buffer error vulnerability fixurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=246651

Trust: 0.6

sources: ZDI: ZDI-23-1556 // CNVD: CNVD-2023-56538 // CNNVD: CNNVD-202307-728

EXTERNAL IDS

db:NVDid:CVE-2023-37247

Trust: 4.6

db:SIEMENSid:SSA-764801

Trust: 3.1

db:JVNid:JVNVU95292697

Trust: 0.8

db:JVNDBid:JVNDB-2023-021710

Trust: 0.8

db:ZDI_CANid:ZDI-CAN-21138

Trust: 0.7

db:ZDIid:ZDI-23-1556

Trust: 0.7

db:CNVDid:CNVD-2023-56538

Trust: 0.6

db:CNNVDid:CNNVD-202307-728

Trust: 0.6

db:VULMONid:CVE-2023-37247

Trust: 0.1

sources: ZDI: ZDI-23-1556 // CNVD: CNVD-2023-56538 // VULMON: CVE-2023-37247 // JVNDB: JVNDB-2023-021710 // CNNVD: CNNVD-202307-728 // NVD: CVE-2023-37247

REFERENCES

url:https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf

Trust: 2.5

url:https://cert-portal.siemens.com/productcert/html/ssa-764801.html

Trust: 1.3

url:https://jvn.jp/vu/jvnvu95292697/

Trust: 0.8

url:https://nvd.nist.gov/vuln/detail/cve-2023-37247

Trust: 0.8

url:https://cxsecurity.com/cveshow/cve-2023-37247/

Trust: 0.6

url:https://nvd.nist.gov

Trust: 0.1

sources: ZDI: ZDI-23-1556 // CNVD: CNVD-2023-56538 // VULMON: CVE-2023-37247 // JVNDB: JVNDB-2023-021710 // CNNVD: CNNVD-202307-728 // NVD: CVE-2023-37247

CREDITS

Anonymous

Trust: 0.7

sources: ZDI: ZDI-23-1556

SOURCES

db:ZDIid:ZDI-23-1556
db:CNVDid:CNVD-2023-56538
db:VULMONid:CVE-2023-37247
db:JVNDBid:JVNDB-2023-021710
db:CNNVDid:CNNVD-202307-728
db:NVDid:CVE-2023-37247

LAST UPDATE DATE

2024-08-14T13:05:33.653000+00:00


SOURCES UPDATE DATE

db:ZDIid:ZDI-23-1556date:2023-10-11T00:00:00
db:CNVDid:CNVD-2023-56538date:2023-07-17T00:00:00
db:VULMONid:CVE-2023-37247date:2023-07-11T00:00:00
db:JVNDBid:JVNDB-2023-021710date:2024-01-19T08:06:00
db:CNNVDid:CNNVD-202307-728date:2023-07-19T00:00:00
db:NVDid:CVE-2023-37247date:2023-07-18T15:02:30.907

SOURCES RELEASE DATE

db:ZDIid:ZDI-23-1556date:2023-10-11T00:00:00
db:CNVDid:CNVD-2023-56538date:2023-07-17T00:00:00
db:VULMONid:CVE-2023-37247date:2023-07-11T00:00:00
db:JVNDBid:JVNDB-2023-021710date:2024-01-19T00:00:00
db:CNNVDid:CNNVD-202307-728date:2023-07-11T00:00:00
db:NVDid:CVE-2023-37247date:2023-07-11T10:15:11.617