CVE-2024-41170 — Siemens / Tecnomatix Plant Simulation V2302

CVE-2024-41170

Siemens / Tecnomatix Plant Simulation V2302 PUBLISHED

Description (CNA)

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0015), Tecnomatix Plant Simulation V2404 (All versions < V2404.0004). The affected applications contain a stack based overflow vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Siemens / Tecnomatix Plant Simulation V2302	affected 0 before V2302.0015
Siemens / Tecnomatix Plant Simulation V2404	affected 0 before V2404.0004

CWE

CWE-121

References

https://cert-portal.siemens.com/productcert/html/ssa-427715.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.