CVE-2024-23801

Name of the Vulnerable Software and Affected Versions Tecnomatix Plant Simulation V2201 (All versions) Tecnomatix Plant Simulation V2302 versions prior to V2302.0007

Description A null pointer dereference vulnerability has been identified in the affected applications while parsing specially crafted SPP files. An attacker could leverage this vulnerability to crash the application, causing a denial of service condition. The vulnerability is related to the parsing of SPP files and can be exploited by an attacker to cause a denial of service.

Recommendations For Tecnomatix Plant Simulation V2201, update to a version that includes the fix for this issue. For Tecnomatix Plant Simulation V2302, update to version V2302.0007 or later to resolve the issue. As a temporary workaround, consider restricting the use of specially crafted SPP files to minimize the risk of exploitation.