Stack Overflow Vulnerability in Tecnomatix Plant Simulation Could Allow Code Execution

CVE-2024-23798

Summary

A stack overflow vulnerability has been identified in Siemens' Tecnomatix Plant Simulation, specifically in versions V2201 (all versions prior to V2201.0012) and V2302 (all versions prior to V2302.0006). This security issue is triggered while parsing carefully crafted WRL files, which may lead to unauthorized code execution within the context of the running process. As users operate with these affected applications, attackers could exploit this vulnerability to gain control over system processes, heightening the importance of applying available security updates or patches.

References