CVE-2023-24992

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19814)

• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdfVendor Advisory

Published

Feb 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24987A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-24988A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-24989A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-2499The RegistrationMagic plugin for WordPress is vulnerable to …9.8
• CVE-2023-24990A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-24991A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-24993A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-24994A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-24995A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-24996A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-24997Deserialization of Untrusted Data vulnerability in Apache So…9.8
• CVE-2023-24998Apache Commons FileUpload before 1.5 does not limit the numb…7.5