CVE-2021-27397: 
Siemens Tecnomatix Plant Simulation vulnerability analysis and mitigation

A vulnerability has been identified in Siemens Tecnomatix Plant Simulation (all versions prior to V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files, which could result in a memory corruption condition (CISA Advisory, ZDI Advisory).

The vulnerability is tracked as CVE-2021-27397 with a CVSS v3.1 base score of 7.8 (HIGH). The attack vector is Local (AV:L), with Low attack complexity (AC:L), requiring No privileges (PR:N) and User interaction (UI:R). The scope is Unchanged (S:U) with High impact on Confidentiality, Integrity, and Availability (C:H/I:H/A:H). The specific flaw exists within the parsing of SPP files, where improper validation of user-supplied data can lead to memory corruption (ZDI Advisory).

An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. This could potentially lead to complete system compromise if successful (CISA Advisory).

Siemens has released version 16.0.5 to address this vulnerability. Users are recommended to update to this version or later. Additionally, users should not open untrusted SPP files from unknown sources. As a general security measure, Siemens recommends protecting network access with appropriate mechanisms and configuring the environment according to operational guidelines for industrial security (CISA Advisory).