CVE-2023-24978

Name of the Vulnerable Software and Affected Versions Tecnomatix Plant Simulation versions prior to V2201.0006

Description The issue is related to access to an uninitialized pointer in the Tecnomatix Plant Simulation software. This can be exploited by an attacker using a specially crafted SPP file, allowing them to execute arbitrary code in the context of the current process.

Recommendations For versions prior to V2201.0006, update to version V2201.0006 or later to resolve the issue. As a temporary workaround, consider restricting access to SPP files or avoiding the use of specially crafted SPP files until the issue is resolved.