Description
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted WRL files.
An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Teamcenter Visualization V14.3 | < V14.3.0.13 | V14.3.0.13 |
| Siemens | Teamcenter Visualization V2312 | < V2312.0009 | V2312.0009 |
| Siemens | Teamcenter Visualization V2406 | < V2406.0007 | V2406.0007 |
| Siemens | Teamcenter Visualization V2412 | < V2412.0002 | V2412.0002 |
| Siemens | Tecnomatix Plant Simulation V2302 | < V2302.0021 | V2302.0021 |
| Siemens | Tecnomatix Plant Simulation V2404 | < V2404.0010 | V2404.0010 |
Advisories 3
- ICSA-25-072-01 Siemens Teamcenter Visualization and Tecnomatix CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0077 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 11, 2025
- SSA-050438 SSA-050438: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and Tecnomatix Plant Simulation Siemens ProductCERT · Mar 11, 2025