Tecnomatix Plant Simulation Vulnerability Could Lead to Denial of Service
CVE-2024-23799

5.5MEDIUM

Key Information:

Vendor

Siemens
Status
Tecnomatix Plant Simulation V2201
Tecnomatix Plant Simulation V2302
Vendor
CVE Published:
13 February 2024

What is CVE-2024-23799?

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted SPP files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Affected Version(s)

Tecnomatix Plant Simulation V2201 0

Tecnomatix Plant Simulation V2302 0

References

https://cert-portal.siemens.com/productcert/html/ssa-0177...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.