CVE-2024-23795: 
Siemens Tecnomatix Plant Simulation vulnerability analysis and mitigation

CVE-2024-23795 is an out-of-bounds write vulnerability affecting Siemens Tecnomatix Plant Simulation software. The vulnerability was discovered in versions V2201 (all versions < V2201.0012) and V2302 (all versions < V2302.0006). The issue occurs when parsing specially crafted WRL files, where the application contains an out-of-bounds write past the end of an allocated buffer (Siemens Advisory, CISA Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a CVSS v4.0 base score of 7.3 (CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N). The vulnerability is classified as CWE-787: Out-of-bounds Write. The issue requires local access and user interaction, specifically opening a malicious WRL file (ZDI Advisory, Siemens Advisory).

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the context of the current process if a user is tricked into opening a malicious file (CISA Advisory, Siemens Advisory).

Siemens has released updates to address this vulnerability. Users of Tecnomatix Plant Simulation V2201 should update to V2201.0012 or later version, while users of V2302 should update to V2302.0006 or later version. Additionally, Siemens recommends not opening untrusted WRL files using Tecnomatix Plant Simulation. As a general security measure, it is recommended to protect network access to devices with appropriate mechanisms and configure the environment according to Siemens' operational guidelines for Industrial Security (Siemens Advisory).