CVE-2023-24978: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer…

PriorityP338high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

EPSS

0.23%

13.2th percentile

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19788)

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	tecnomatix_plant_simulation	< 2201.0006	2201.0006
siemens	tecnomatix_plant_simulation	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.