← Vulnerability feed

Vulnerability record · CVE-2023-45204 · published 10 October 2023

CVE-2023-45204: Siemens tecnomatix vulnerability

Siemens · Tecnomatix

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21268)

7.8 CVSS 3.1 High EPSS 0.22% · top 88.2% CWE-704 · CWE-704
7.8CVSS 3.1 base score
0.22%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21268)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://cert-portal.siemens.com/productcert/pdf/ssa-524778.pdf PatchVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-524778.pdf PatchVendor Advisory

Track CVE-2023-45204 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2023-45601Siemens parasolid stack-based buffer overflow vulnerabilityA vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36.0 (All v…EPSS 0.23%7.8CVE-2023-44081Siemens tecnomatix out-of-bounds write vulnerabilityA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions…EPSS 0.22%7.8CVE-2023-44082Siemens tecnomatix out-of-bounds write vulnerabilityA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions…EPSS 0.22%7.8CVE-2023-44083Siemens tecnomatix out-of-bounds write vulnerabilityA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions…EPSS 0.22%7.8CVE-2023-44084Siemens tecnomatix out-of-bounds read vulnerabilityA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions…EPSS 0.22%7.8CVE-2023-44085Siemens tecnomatix out-of-bounds read vulnerabilityA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions…EPSS 0.22%7.8CVE-2023-44086Siemens tecnomatix out-of-bounds read vulnerabilityA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions…EPSS 0.22%7.8CVE-2023-44087Siemens tecnomatix out-of-bounds read vulnerabilityA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions…EPSS 0.22%

Source: NIST National Vulnerability Database (record CVE-2023-45204), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.