High severity7.8NVD Advisory· Published Feb 14, 2023· Updated Jun 17, 2026
CVE-2023-24978
CVE-2023-24978
Description
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19788)
Affected products
3cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*range: <2201.0006
- (no CPE)range: <V2201.0006
- (no CPE)range: All versions < V2201.0006
Patches
Vulnerability mechanics
References
1- cert-portal.siemens.com/productcert/pdf/ssa-847261.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.