CVE-2024-52565 : SIEMENS TECNOMATIX PLANT SIMULATION PRIOR 2302.0018/2404.0007 WRL FILE OUT-OF-BOUNDS WRITE

Description

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24231).

References

https://cert-portal.siemens.com/productcert/html/ssa-824503.html

For More Information

CVERecord

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2024-43416 : GLPI UP TO 10.0.16 INFORMATION DISCLOSURE

CVE-2024-43416 : GLPI UP TO 10.0.16 INFORMATION DISCLOSURE

Description GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17,

CVE-2024-0012 : PALO ALTO NETWORKS PAN-OS MANAGEMENT WEB INTERFACE MISSING AUTHENTICATION

CVE-2024-0012 : PALO ALTO NETWORKS PAN-OS MANAGEMENT WEB INTERFACE MISSING AUTHENTICATION

Description An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management

CVE-2024-47533 : COBBLER UP TO 3.2.2/3.3.6 UTILS.GET_SHARED_SECRET IMPROPER AUTHENTICATION

CVE-2024-47533 : COBBLER UP TO 3.2.2/3.3.6 UTILS.GET_SHARED_SECRET IMPROPER AUTHENTICATION

Description Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability