CVE-2024-32639

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0011). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted MODEL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-22974)

• CWE-787

• https://cert-portal.siemens.com/productcert/html/ssa-923361.html
• https://cert-portal.siemens.com/productcert/html/ssa-923361.html

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-32633An unsigned value can never be negative, so eMMC full disk t…4
• CVE-2024-32634In huge memory get unmapped area check, code can never be re…6.1
• CVE-2024-32635A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-32636A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-32637A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2024-32638Inconsistent Interpretation of HTTP Requests ('HTTP Request …6.3
• CVE-2024-3264Use of a Broken or Risky Cryptographic Algorithm vulnerabili…5.3
• CVE-2024-32640MASA CMS is an Enterprise Content Management platform based …9.8
• CVE-2024-32641Masa CMS is an open source Enterprise Content Management pla…9.8
• CVE-2024-32642Masa CMS is an open source Enterprise Content Management pla…8.8
• CVE-2024-32643Masa CMS is an open source Enterprise Content Management pla…7.5
• CVE-2024-32644Evmos is a scalable, high-throughput Proof-of-Stake EVM bloc…9.1