CVE-2024-41170: Siemens Tecnomatix Plant Simulation

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0015), Tecnomatix Plant Simulation V2404 (All versions < V2404.0004). The affected applications contain a stack based overflow vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.

Affected products

• Siemens Tecnomatix Plant Simulation: from 2302.0, before 2302.0015 (fixed in 2302.0015); from 2404.0, before 2404.0004 (fixed in 2404.0004)
• Siemens Tecnomatix Plant Simulation v2302: before V2302.0015 (fixed in V2302.0015)
• Siemens Tecnomatix Plant Simulation v2404: before V2404.0004 (fixed in V2404.0004)

Published 2024-09-10. Last modified 2026-06-17.