CVE-2024-23803
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 13, 2024
Updated: Feb 15, 2024
CWE ID 787
Summary
CVE-2024-23803 is a newly identified vulnerability affecting Tecnomatix Plant Simulation V2201 (all versions) and Tecnomatix Plant Simulation V2302 (all versions below V2302.0007). This issue stems from an out-of-bounds write vulnerability within the application's parsing of specially crafted SPP files. By exploiting this flaw, an attacker can write data beyond the allocated buffer, potentially resulting in arbitrary code execution in the context of the current process.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Siemens AG