GCVE-110-NCSC-2024-246

Weaknesses (CWE)

CWE-416Use After FreeCWE-20Improper Input ValidationCWE-1220Insufficient Granularity of Access ControlCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-787Out-of-bounds WriteCWE-400Uncontrolled Resource ConsumptionCWE-311Missing Encryption of Sensitive DataCWE-476NULL Pointer DereferenceCWE-404Improper Resource Shutdown or ReleaseCWE-401Missing Release of Memory after Effective LifetimeCWE-379Creation of Temporary File in Directory with Insecure PermissionsCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-125Out-of-bounds ReadCWE-349Acceptance of Extraneous Untrusted Data With Trusted DataCWE-321Use of Hard-coded Cryptographic KeyCWE-328Use of Weak HashCWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CWE-567Unsynchronized Access to Shared Data in a Multithreaded ContextCWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')CWE-170Improper Null TerminationCWE-269Improper Privilege ManagementCWE-613Insufficient Session ExpirationCWE-352Cross-Site Request Forgery (CSRF)CWE-522Insufficiently Protected CredentialsCWE-749Exposed Dangerous Method or FunctionCWE-319Cleartext Transmission of Sensitive InformationCWE-614Sensitive Cookie in HTTPS Session Without 'Secure' AttributeCWE-330Use of Insufficiently Random ValuesCWE-704Incorrect Type Conversion or CastCWE-287Improper AuthenticationCWE-121Stack-based Buffer OverflowCWE-326Inadequate Encryption StrengthCWE-123Write-what-where ConditionCWE-415Double FreeCWE-681Incorrect Conversion between Numeric TypesCWE-190Integer Overflow or WraparoundCWE-667Improper LockingCWE-664Improper Control of a Resource Through its LifetimeCWE-833DeadlockCWE-295Improper Certificate ValidationCWE-754Improper Check for Unusual or Exceptional Conditions

Risk Scores

CVSS 3.1

7.8/10

High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
siemens	tecnomatix_plant_simulation	—	—

Aliases

CVE-2021-47178 CVE-2022-1015 CVE-2022-2097 CVE-2022-3435 CVE-2022-3545 CVE-2022-3623 CVE-2022-36323 CVE-2022-3643 CVE-2022-39189 CVE-2022-40225 CVE-2022-40303 CVE-2022-40304 CVE-2022-41742 CVE-2022-42328 CVE-2022-42329 CVE-2022-4304 CVE-2022-4450 CVE-2022-44792 CVE-2022-44793 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2022-46144 CVE-2023-0160 CVE-2023-0215 CVE-2023-0286 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 CVE-2023-1017 CVE-2023-2124 CVE-2023-21255 CVE-2023-21808 CVE-2023-2269 CVE-2023-24895 CVE-2023-24897 CVE-2023-24936 CVE-2023-26552 CVE-2023-26553 CVE-2023-26554 CVE-2023-27321 CVE-2023-28260 CVE-2023-28319 CVE-2023-28484 CVE-2023-29331 CVE-2023-29469 CVE-2023-32032 CVE-2023-33126 CVE-2023-33127 CVE-2023-33128 CVE-2023-33135 CVE-2023-33170 CVE-2023-3446 CVE-2023-35390 CVE-2023-35391 CVE-2023-35788 CVE-2023-35823 CVE-2023-35824 CVE-2023-35828 CVE-2023-35829 CVE-2023-36038 CVE-2023-36049 CVE-2023-36435 CVE-2023-36558 CVE-2023-36792 CVE-2023-36793 CVE-2023-36794 CVE-2023-36796 CVE-2023-36799 CVE-2023-3817 CVE-2023-38171 CVE-2023-38178 CVE-2023-38180 CVE-2023-38380 CVE-2023-38533 CVE-2023-39615 CVE-2023-41910 CVE-2023-44317 CVE-2023-44318 CVE-2023-44319 CVE-2023-44373 CVE-2023-44374 CVE-2023-44487 CVE-2023-49691 CVE-2023-50763 CVE-2023-52474 CVE-2023-5678 CVE-2024-0775 CVE-2024-31484 CVE-2024-33500 CVE-2024-35206 CVE-2024-35207 CVE-2024-35208 CVE-2024-35209 CVE-2024-35210 CVE-2024-35211 CVE-2024-35212 CVE-2024-35292 CVE-2024-35303 CVE-2024-36266

References

advisory

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.