CVE-2024-23800: Siemens Tecnomatix Plant Simulation

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted SPP files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Affected products

• Siemens Tecnomatix Plant Simulation: from 2302.0, before 2302.0007 (fixed in 2302.0007); version 2201.0 only

Published 2024-02-13. Last modified 2026-06-17.