[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ff0KuF1Seu6zaKYVDqIBA7MVM74AL3duzBn79RjrOGfE":3,"g5a-risk:CVE-2024-23796":113},{"success":4,"data":5,"meta":110},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":27,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":53,"weaknesses":54,"weaknessesCount":53,"isActivelyExploited":68,"cisaInfo":27,"otxData":27,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":108,"notableEvents":109},"CVE-2024-23796","What is CVE-2024-23796?","A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \u003C V2201.0012), Tecnomatix Plant Simulation V2302 (All versions \u003C V2302.0006). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.","A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \u003C V2201.0012), Tecnomatix Plant Simulation V2302 (All versions \u003C V2302...","2024-02-13T09:15:47.737","2026-06-17T07:13:37.15",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":32},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"productcert@siemens.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,1.8,5.9,[],[],[],0.00313,[33,33,33,33,33,33,33],"High",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"siemens","tecnomatix_plant_simulation","*","cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",1,[44,51],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-017796.html","Siemens",[48,49,50],"Mitigation","Patch","Vendor Advisory",{"url":45,"source":46,"tags":52},[48,49,50],2,[55,63],{"id":56,"name":57,"description":58,"extendedDescription":59,"status":60,"abstraction":61,"structure":62},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","","Draft","Variant","Simple",{"id":64,"name":65,"description":66,"extendedDescription":59,"status":60,"abstraction":67,"structure":62},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2024-23796? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-23796, a high severity cyber security vulnerability from 2024. A vulnerability has been identified in Tecnomatix Plant Sim...","CVE-2024-23796, CVE-2024-23796 vulnerability, CVE-2024-23796 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, siemens security, tecnomatix_plant_simulation vulnerability","\u002Fwhat-is\u002Fcve-2024-23796",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-23796","Cybersecurity","CVE-2024-23796, CVE-2024-23796 vulnerability, CVE-2024-23796 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":27,"Negate":27,"Nodes":97},[98],{"Operator":99,"Negate":68,"CPEMatch":100},"OR",[101,104],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":102,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":103,"VersionEndIncluding":27},"92315B86-671A-48F9-9D7D-C638DABD8520","2201.0012",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":105,"VersionStartExcluding":27,"VersionStartIncluding":106,"VersionEndExcluding":107,"VersionEndIncluding":27},"D222D65A-C271-4BE4-8139-DB5F38D053D5","2302.0","2302.0006",[],[],{"lastModified":11,"cacheTime":111,"version":112},1793229509815,"2.0",{"score":114,"band":115,"action":116,"scoredAt":117},46,"Medium","Plan remediation","2026-10-28T07:00:25.771036+00:00"]