High SSA-987403 3 CVEs

SSA-987403: Multiple Vulnerabilities in Teamcenter

Published Sep 14, 2021 · Updated Sep 14, 2021

Vendor: Siemens Product: Teamcenter V12.4 Product: Teamcenter V13.0 Product: Teamcenter V13.1 Product: Teamcenter V13.2

Summary

Teamcenter is affected by three vulnerabilities namely incorrect privilege assignment, Insecure Direct Object Reference (IDOR) and XML External Entity Injection (XXE).

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

Unscored —

CVE-2021-40354

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…

Siemens Teamcenter V13.0 Teamcenter V12.4 Teamcenter V13.2 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-40355

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…

Siemens Teamcenter V12.4 Teamcenter V13.0 Teamcenter V13.1 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-40356

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…

Siemens Teamcenter V12.4 Teamcenter V13.0 Teamcenter V13.1 ICS / OT

Sep 14, 2021

Revision history

2021-09-14 #1
Publication Date

References

SSA-987403: Multiple Vulnerabilities in Teamcenter - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf
SSA-987403: Multiple Vulnerabilities in Teamcenter - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-987403.txt