← console
voxell vciy

CVE-2024-23803

ROUTINE

Telemetry drift only. No threshold crossed and no authority ruling changed.

CVE record, CISA KEV and EPSS as of 2026-10-18.

CVEs like this one computed, by meaning

What to do now held facts and links

  1. Upgrade to tecnomatix plant simulation 2302.0007 or later upper bounds of the CVE record's affected ranges
  2. Record your decision, dated and frozen with today's evidence: patch by a date · mitigated by a compensating control · deferred · accepted the risk · not affected
  3. Check your version against the ranges this record publishes.

What it is stated by the CNA

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process.

weakness
CWE-787: Out-of-bounds Write
affected
Siemens Tecnomatix Plant Simulation V2201; Siemens Tecnomatix Plant Simulation V2302
published ranges
siemens tecnomatix plant simulation >= 2302.0 < 2302.0007; siemens tecnomatix plant simulation 2201.0
first unaffected version, by branch
tecnomatix plant simulation 2302.0007
severity
7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
assigned by
siemens
published
2024-02-13

check us cert-portal.siemens.com

Exploit code held, dated

exploit code
None held in the PoC-in-GitHub feed. A public repository changes this brief.

What moved held, dated

dateEPSSevent
14 Feb 20240.00053
15 Feb 20240.00046
17 Dec 20240.00043
17 Mar 20250.00057scoring model v2025.03.14
25 Mar 20250.0006
29 Mar 20250.00117
30 Mar 20250.0006
15 Apr 20250.0007
15 Jun 20250.00063
24 Jun 20250.0007
27 Jun 20250.00054
4 Jul 20250.00073
30 Oct 20250.00095
18 Nov 20250.0006
21 Nov 20250.00095
15 Jun 20260.00206scoring model v2026.06.15

16 observations held. A step marked with a scoring model moved because the measurement was replaced, not because the vulnerability changed.

Outside the record researched, cited

This section reads the record's references and adds cited findings from outside it. It needs an account. Everything above is held facts and is complete without it.

Sign in to add the researched section

What would change this brief held, dated

CISA KEV
Not listed in the catalogue we hold. A listing changes this brief.
exploit probability
0.00 on 2026-06-15 (FIRST's EPSS, a probability and not evidence of exploitation). Next band line: 10% (0.10). Crossing a line changes this brief.
fix
Held: tecnomatix plant simulation 2302.0007. A newer fix from the CNA or OSV changes this brief.

Watch this CVE What counts as a move

How to check this

Every value above is held with two dates: when it was true upstream (as_of) and when we recorded it (tx_from). Re-derive the exploit probability as it stood on any date:

SELECT value, source, source_version, as_of, tx_from
FROM volatile_valid_as_of('CVE-2024-23803', '2026-10-31T23:59:59.999999Z', now());