SSA-789162 — SSA-789162: Vulnerabilities in Teamcenter

Summary

Teamcenter is affected by XML External Entity Injection (XXE,
CVE-2022-29801) and a stack based buffer overflow vulnerability
(CVE-2022-24290). XXE impacts only Teamcenter versions before V13.1.
Siemens has released updates for the affected products and recommends
to update to the latest versions.

Vulnerabilities 2

Unscored —

CVE-2022-24290

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V…

Siemens Teamcenter V12.4 Teamcenter V13.0 Teamcenter V13.1 ICS / OT

May 10, 2022
Unscored —

CVE-2022-29801

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V…

Siemens Teamcenter V13.0 Teamcenter V12.4 ICS / OT

May 10, 2022

Revision history

2022-08-09 #3
Added fix for Teamcenter version line V14.0
2022-06-14 #2
Added fix for Teamcenter version line V13.1
2022-05-10 #1
Publication Date

References

SSA-789162: Vulnerabilities in Teamcenter - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-789162.pdf
SSA-789162: Vulnerabilities in Teamcenter - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-789162.txt