CVE-2024-23804: High severity Siemens Tecnomatix Plant Simulation vulnerability
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected applications contain a stack overflow vulnerability while parsing specially crafted PSOBJ files. This could allow an attacker to execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Tecnomatix Plant Simulationto a version that resolves this vulnerability.Fixed in V2201.0012 - Upgrade
Upgrade
Tecnomatix Plant Simulationto a version that resolves this vulnerability.Fixed in V2302.0006
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23804?
CVE-2024-23804 is classified as a high severity vulnerability due to the potential for remote code execution from a stack overflow.
How do I fix CVE-2024-23804?
To fix CVE-2024-23804, you should update Tecnomatix Plant Simulation to version 2201.0012 or later for V2201 and 2302.0006 or later for V2302.
What versions are affected by CVE-2024-23804?
CVE-2024-23804 affects all versions of Tecnomatix Plant Simulation prior to V2201.0012 and V2302.0006.
What exploit exists for CVE-2024-23804?
CVE-2024-23804 can be exploited through specially crafted PSOBJ files leading to a stack overflow.
Who is affected by CVE-2024-23804?
Anyone using Siemens Tecnomatix Plant Simulation versions earlier than 2201.0012 or 2302.0006 is affected by CVE-2024-23804.