CVE-2023-24986

A vulnerability has been identified in Tecnomatix Plant Simulation All versions V2201.0006. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the...

CVE-2023-24986

CVE-2023-24986 affects Siemens Tecnomatix Plant Simulation prior to V2201.0006. The issue is an out-of-bounds write when parsing SPP files, enabling arbitrary code execution in the current process (ZDI- CAN-19808). Some sources describe this as a stack/heap overflow with potential remote code exe...