Vulnerabilities > CVE-2024-52568 - Use After Free vulnerability in Siemens Tecnomatix Plant Simulation

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
siemens
CWE-416
NVD
Published: 2024-11-18
Updated: 2024-11-20

Summary

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted WRL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-24244)

Vulnerable Configurations

Part Description Count
Application
Siemens
12

Common Weakness Enumeration (CWE)

References