High ICSA-21-257-08 3 CVEs

Siemens Teamcenter

Published Sep 14, 2021 · Updated May 6, 2025 · Revision 2

Vendor: Siemens Product: Teamcenter V12.4 Product: Teamcenter V13.0 Product: Teamcenter V13.1 Product: Teamcenter V13.2

Summary

Teamcenter is affected by three vulnerabilities namely incorrect privilege assignment, Insecure Direct Object Reference (IDOR) and XML External Entity Injection (XXE).

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

Unscored —

CVE-2021-40354

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…

Siemens Teamcenter V13.0 Teamcenter V12.4 Teamcenter V13.2 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-40355

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…

Siemens Teamcenter V12.4 Teamcenter V13.0 Teamcenter V13.1 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-40356

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…

Siemens Teamcenter V12.4 Teamcenter V13.0 Teamcenter V13.1 ICS / OT

Sep 14, 2021

Revision history

2025-05-06 #2
Revision - Fixing typos
2021-09-14 #1
Publication Date

References

SSA-987403: Multiple Vulnerabilities in Teamcenter - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-987403.txt
SSA-987403: Multiple Vulnerabilities in Teamcenter - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf
ICS Advisory ICSA-21-257-08 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-257-08
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B