CVE-2021-27398

State: Published
Severity: Not scored
Published: May 12, 2021
Updated: Aug 3, 2024
Reserved: Feb 18, 2021

Description

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27396. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13290)

Scores

The record has no CVSS score.

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
Tecnomatix Plant SimulationSiemens	All versions < V16.0.5Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-983548.pdf
https://www.zerodayinitiative.com/advisories/ZDI-21-570/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.