PT-2024-2693
CVE-2024-23800
·
Published
2024-01-03
·
Updated
2024-02-13
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Tecnomatix Plant Simulation versions V2201 through V2302.0006
Description
The issue is related to a null pointer dereference vulnerability. This vulnerability can be exploited by an attacker using specially crafted SPP files, potentially causing a denial of service condition by crashing the application.
Recommendations
For Tecnomatix Plant Simulation version V2201, update to a version newer than V2201.
For Tecnomatix Plant Simulation version V2302, update to version V2302.0007 or newer.
As a temporary workaround, consider restricting the use of specially crafted SPP files to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾