CVE-2023-27398

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20304)

• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdfVendor Advisory

Published

Mar 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-27391Improper access control in some Intel(R) oneAPI Toolkit and …6.7
• CVE-2023-27392Incorrect default permissions in the Intel(R) Support androi…4.4
• CVE-2023-27394Osprey Pump Controller version 1.01 is vulnerable an unauthe…9.8
• CVE-2023-27395A heap-based buffer overflow vulnerability exists in the vpn…8.1
• CVE-2023-27396FINS (Factory Interface Network Service) is a message commun…9.8
• CVE-2023-27397Unrestricted upload of file with dangerous type exists in Mi…9.8
• CVE-2023-27399A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-2740A vulnerability, which was classified as problematic, has be…6.1
• CVE-2023-27400A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-27401A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-27402A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-27403A vulnerability has been identified in Tecnomatix Plant Simu…7.8