CVE-2023-24978: Siemens Tecnomatix Plant Simulation

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19788)

Affected products

• Siemens Tecnomatix Plant Simulation: before 2201.0006 (fixed in 2201.0006)

Published 2023-02-14. Last modified 2026-06-17.