PT-2024-2696

CVE-2024-23799

·

Published

2024-01-03

·

Updated

2024-02-13

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Tecnomatix Plant Simulation versions V2201 through V2302.0006
Description The issue is related to a null pointer dereference vulnerability. This vulnerability can be exploited by an attacker using specially crafted SPP files, potentially causing a denial of service condition by crashing the application.
Recommendations For Tecnomatix Plant Simulation V2201, update to a version later than V2201. For Tecnomatix Plant Simulation V2302, update to version V2302.0007 or later. As a temporary workaround, consider restricting the use of specially crafted SPP files to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾