CVE-2024-23799 - A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007)

Back Back to CVE browser

MEDIUM

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007)

Published Feb 13, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.17%

Description

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted SPP files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Affected products

Vendor Siemens Product Tecnomatix Plant Simulation V2201 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Tecnomatix Plant Simulation V2302 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2302.0007

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

Tecnomatix Plant Simulation V2201

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Tecnomatix Plant Simulation V2302

n/a

Version	Status	Constraints
0	affected	<V2302.0007

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (2)

https://cert-portal.siemens.com/productcert/html/ssa-017796.html
MitigationPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-21252
Advisory

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-017796.html		MitigationPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-21252		Advisory