Description
A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file.
This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Teamcenter Visualization V14.2 | < V14.2.0.14 | V14.2.0.14 |
| Siemens | Teamcenter Visualization V14.3 | < V14.3.0.12 | V14.3.0.12 |
| Siemens | Teamcenter Visualization V2312 | < V2312.0008 | V2312.0008 |
| Siemens | Tecnomatix Plant Simulation V2302 | < V2302.0016 | V2302.0016 |
| Siemens | Tecnomatix Plant Simulation V2404 | < V2404.0005 | V2404.0005 |
Advisories 6
- ICSA-24-347-09 Siemens Teamcenter Visualization CISA ICS & IT advisories · May 6, 2025
- ICSA-24-284-13 Siemens Tecnomatix Plant Simulation CISA ICS & IT advisories · May 6, 2025
- NCSC-2024-0473 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 10, 2024
- SSA-583523 SSA-583523: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation Siemens ProductCERT · Dec 10, 2024
- SSA-645131 SSA-645131: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization Siemens ProductCERT · Dec 10, 2024
- NCSC-2024-0390 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Oct 8, 2024