Not rated
CVE-2021-27398 A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5)
Description
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27396. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13290)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tecnomatix Plant Simulation | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
- www.zerodayinitiative.com www.zerodayinitiative.com
Timeline
- Published
- Last modified
Other CVEs of Tecnomatix Plant Simulation
The 35 CVEs of Tecnomatix Plant Simulation →
CVE-2026-109619
RCE via stale global state
9.2
Critical
CVE-2026-109618
RCE via OOM corruption
9.2
Critical
CVE-2025-40745
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions <…
3.7
Low
CVE-2025-40801
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT…
8.1
High