CVE-2024-23798: High severity Siemens Tecnomatix Plant Simulation vulnerability
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected applications contain a stack overflow vulnerability while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Tecnomatix Plant Simulationto a version that resolves this vulnerability.Fixed in V2201.0012 - Upgrade
Upgrade
Tecnomatix Plant Simulationto a version that resolves this vulnerability.Fixed in V2302.0006
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23798?
CVE-2024-23798 has a high severity due to its potential for remote code execution via a stack overflow in Tecnomatix Plant Simulation.
How do I fix CVE-2024-23798?
To fix CVE-2024-23798, update Tecnomatix Plant Simulation to versions V2201.0012 or V2302.0006 or later.
Which versions of Tecnomatix Plant Simulation are affected by CVE-2024-23798?
CVE-2024-23798 affects all versions of Tecnomatix Plant Simulation prior to V2201.0012 and V2302.0006.
What type of vulnerability is CVE-2024-23798?
CVE-2024-23798 is a stack overflow vulnerability occurring while parsing WRL files in Tecnomatix Plant Simulation.
Who is responsible for addressing CVE-2024-23798?
Users of Tecnomatix Plant Simulation should address CVE-2024-23798 by applying the relevant software updates provided by Siemens.