vciy

Siemens Tecnomatix Plant Simulation: 28 records in one advisory

28 records announced together, published between 2023-02-14 and 2023-03-14, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

Every record names something of its own, listed against it below.

Most commonly mapped weakness across the batch: CWE-787: Out-of-bounds Write.

What this page does not cover

Every record citing this advisory is on this page.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2023-24978uninitialized pointer access zdi-can-19788CWE-824: Access of Uninitialized Pointer
CVE-2023-24979zdi-can-19789CWE-787: Out-of-bounds Write
CVE-2023-24980zdi-can-19790CWE-787: Out-of-bounds Write
CVE-2023-24981zdi-can-19791CWE-787: Out-of-bounds Write
CVE-2023-24982zdi-can-19804CWE-787: Out-of-bounds Write
CVE-2023-24983zdi-can-19805CWE-787: Out-of-bounds Write
CVE-2023-24984zdi-can-19806CWE-787: Out-of-bounds Write
CVE-2023-24985zdi-can-19807CWE-787: Out-of-bounds Write
CVE-2023-24986zdi-can-19808CWE-787: Out-of-bounds Write
CVE-2023-24987zdi-can-19809CWE-787: Out-of-bounds Write
CVE-2023-24988zdi-can-19810CWE-787: Out-of-bounds Write
CVE-2023-24989zdi-can-19811CWE-787: Out-of-bounds Write
CVE-2023-24990zdi-can-19812CWE-787: Out-of-bounds Write
CVE-2023-24991zdi-can-19813CWE-787: Out-of-bounds Write
CVE-2023-24992zdi-can-19814CWE-787: Out-of-bounds Write
CVE-2023-24993zdi-can-19815CWE-787: Out-of-bounds Write
CVE-2023-24994zdi-can-19816CWE-787: Out-of-bounds Write
CVE-2023-24995zdi-can-19817CWE-787: Out-of-bounds Write
CVE-2023-24996zdi-can-19818CWE-787: Out-of-bounds Write
CVE-2023-27398zdi-can-20304CWE-787: Out-of-bounds Write
CVE-2023-27399zdi-can-20299 zdi-can-20346CWE-787: Out-of-bounds Write
CVE-2023-27400zdi-can-20300CWE-787: Out-of-bounds Write
CVE-2023-27401zdi-can-20308 zdi-can-20345CWE-125: Out-of-bounds Read
CVE-2023-27402zdi-can-20334CWE-125: Out-of-bounds Read
CVE-2023-27403memory corruption zdi-can-20303 zdi-can-20348CWE-119: Improper Restriction of Operations…
CVE-2023-27404zdi-can-20433CWE-121: Stack-based Buffer Overflow
CVE-2023-27405zdi-can-20432CWE-125: Out-of-bounds Read
CVE-2023-27406zdi-can-20449CWE-121: Stack-based Buffer Overflow

28 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.