CVE-2024-35303CWE-704

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0012), Tecnomatix Plant Simulation V2404 (All versions <…

High · published June 11, 2024

CVSS v4.0
7.3
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0012), Tecnomatix Plant Simulation V2404 (All versions < V2404.0001). The affected applications contain a type confusion vulnerability while parsing specially crafted MODEL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-22958)

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00251 · 15.5th percentile
Weakness
CWE-704 · Incorrect Type Conversion or Cast
Published
2024-06-11T11:15Z
EPSS history
Timeline
  • 11 JUN 11:15Z
    A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0012), Tecnomatix Plant Simulation V2404 (All versions <…
    cvelistv5