Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-24958 State: PUBLISHED Published: 2023-05-04T13:38:49.305Z Last Updated: 2025-01-29T16:38:59.199Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Virtualization Engine TS7700 Problem Types: CWE-78 Description: A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote code execution. IBM X-Force ID: 246320. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6980845 - https://exchange.xforce.ibmclo
: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6980845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/246320
CVE ID: CVE-2023-24959 State: PUBLISHED Published: 2023-08-28T00:56:30.619Z Last Updated: 2024-09-30T17:51:01.522Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-200 Description: IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration. IBM X-Force ID: 246332. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6988615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/246332
CVE ID: CVE-2023-24960 State: PUBLISHED Published: 2023-02-17T18:26:32.622Z Last Updated: 2025-03-12T19:59:31.650Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-22 Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246333 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6953521 - https://exchange.xforce.
tainer: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6953521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/246333
CVE ID: CVE-2023-24964 State: PUBLISHED Published: 2023-02-17T16:35:13.206Z Last Updated: 2025-03-12T20:07:24.386Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-312 Description: IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6953519 - https://exchange.xforce.ibmcloud.com/vulnerabilities/246463
CVE ID: CVE-2023-24965 State: PUBLISHED Published: 2023-09-08T20:14:46.513Z Last Updated: 2024-09-26T14:32:14.442Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: 284 Improper Access Control Description: IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. IBM X-Force ID: 246713. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/246713
CVE ID: CVE-2023-24966 State: PUBLISHED Published: 2023-04-27T13:08:42.186Z Last Updated: 2025-01-30T20:56:03.704Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: WebSphere Application Server Problem Types: CWE-79 Description: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246904. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6986333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/246904
CVE ID: CVE-2023-24971 State: PUBLISHED Published: 2023-07-31T01:16:37.346Z Last Updated: 2024-10-18T20:22:44.091Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: B2B Advanced Communications, Multi-Enterprise Integration Gateway Problem Types: CWE-502 Description: IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 could allow a user to cause a denial of service due to the deserializing of untrusted serialized Java objects. IBM X-Force ID: 246976. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7014933 - https://exchange.xforc
ontainer: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7014933 - https://exchange.xforce.ibmcloud.com/vulnerabilities/246976
CVE ID: CVE-2023-24975 State: PUBLISHED Published: 2023-03-02T20:33:41.451Z Last Updated: 2025-03-05T19:52:55.258Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Spectrum Symphony Problem Types: 644 Improper Neutralization of HTTP Headers for Scripting Syntax Description: IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
ng or session hijacking. IBM X-Force ID: 247030. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6959369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247030
CVE ID: CVE-2023-24977 State: PUBLISHED Published: 2023-02-01T09:09:55.963Z Last Updated: 2025-03-27T13:34:22.350Z Vendors: Apache Software Foundation Products: Apache InLong Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214 https://github.com/apache/inlong/pull/7214 to solve it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/ggozxorctn3tdll7bgmpwwcbjnd0s6w7
CVE ID: CVE-2023-24978 State: PUBLISHED Published: 2023-02-14T10:36:47.474Z Last Updated: 2025-03-20T14:10:30.450Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-824 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19788) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
the current process. (ZDI-CAN-19788) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24979 State: PUBLISHED Published: 2023-02-14T10:36:48.580Z Last Updated: 2025-03-20T18:51:09.033Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19789) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19789) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24980 State: PUBLISHED Published: 2023-02-14T10:36:49.677Z Last Updated: 2025-03-19T19:23:56.056Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19790) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19790) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24981 State: PUBLISHED Published: 2023-02-14T10:36:50.780Z Last Updated: 2025-03-20T18:50:38.181Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19791) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19791) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24982 State: PUBLISHED Published: 2023-02-14T10:36:51.881Z Last Updated: 2025-03-20T18:48:56.215Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19804) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19804) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24983 State: PUBLISHED Published: 2023-02-14T10:36:53.001Z Last Updated: 2025-03-20T18:40:26.106Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19805) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19805) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24984 State: PUBLISHED Published: 2023-02-14T10:36:54.131Z Last Updated: 2025-03-20T18:18:02.858Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19806) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19806) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24985 State: PUBLISHED Published: 2023-02-14T10:36:55.207Z Last Updated: 2025-03-20T18:14:53.694Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19807) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19807) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24986 State: PUBLISHED Published: 2023-02-14T10:36:56.309Z Last Updated: 2025-03-19T19:21:52.344Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19808) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19808) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24987 State: PUBLISHED Published: 2023-02-14T10:36:57.396Z Last Updated: 2025-03-19T19:20:09.266Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19809) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19809) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24988 State: PUBLISHED Published: 2023-02-14T10:36:58.514Z Last Updated: 2025-03-19T19:17:53.911Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19810) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19810) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24989 State: PUBLISHED Published: 2023-02-14T10:36:59.619Z Last Updated: 2025-03-19T19:16:04.196Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19811) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19811) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24990 State: PUBLISHED Published: 2023-02-14T10:37:00.759Z Last Updated: 2025-03-19T19:11:27.198Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19812) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19812) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24991 State: PUBLISHED Published: 2023-02-14T10:37:02.099Z Last Updated: 2025-03-19T19:10:49.536Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19813) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19813) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24992 State: PUBLISHED Published: 2023-02-14T10:37:03.196Z Last Updated: 2025-03-18T17:48:05.615Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19814) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19814) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24993 State: PUBLISHED Published: 2023-02-14T10:37:04.297Z Last Updated: 2025-03-20T18:13:05.062Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19815) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19815) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24994 State: PUBLISHED Published: 2023-02-14T10:37:05.417Z Last Updated: 2025-03-19T19:10:19.954Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19816) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19816) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24995 State: PUBLISHED Published: 2023-02-14T10:37:06.480Z Last Updated: 2025-03-19T18:57:19.059Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19817) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19817) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-24996 State: PUBLISHED Published: 2023-02-14T10:37:07.528Z Last Updated: 2025-03-19T15:28:24.962Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19818) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-19818) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf