Description
A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted WRL files.
An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-24244)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Teamcenter Visualization V14.2 | < V14.2.0.14 | V14.2.0.14 |
| Siemens | Teamcenter Visualization V14.3 | < V14.3.0.12 | V14.3.0.12 |
| Siemens | Teamcenter Visualization V2312 | < V2312.0008 | V2312.0008 |
| Siemens | Teamcenter Visualization V2406 | < V2406.0005 | V2406.0005 |
| Siemens | Tecnomatix Plant Simulation V2302 | < V2302.0018 | V2302.0018 |
| Siemens | Tecnomatix Plant Simulation V2404 | < V2404.0007 | V2404.0007 |
Advisories 5
- ICSA-24-347-09 Siemens Teamcenter Visualization CISA ICS & IT advisories · May 6, 2025
- NCSC-2024-0473 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 10, 2024
- SSA-645131 SSA-645131: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization Siemens ProductCERT · Dec 10, 2024
- NCSC-2024-0452 Kwetsbaarheden verholpen in Siemens Tecnomatix Plant Simulation NCSC-NL (Netherlands) · Nov 19, 2024
- SSA-824503 SSA-824503: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation Before V2302.0018 and V2404.0007 Siemens ProductCERT · Nov 18, 2024