CVE-2024-23799: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The…

PriorityP419medium5.5CVSS 3.1

AVLACLPRNUIRSUCNINAH

EPSS

0.17%

6.6th percentile

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted SPP files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
siemens	tecnomatix_plant_simulation	—	—
siemens	tecnomatix_plant_simulation	>= 2302.0 < 2302.0007	2302.0007
siemens	tecnomatix_plant_simulation_v2201	< *	*
siemens	tecnomatix_plant_simulation_v2302	< V2302.0007	V2302.0007

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.