Memory Corruption Vulnerability in Tecnomatix Plant Simulation
CVE-2024-45472
7.8HIGH
Key Information:
- Vendor
- Siemens
- Status
- Vendor
- CVE Published:
- 8 October 2024
Summary
A memory corruption vulnerability has been identified in multiple versions of Siemens Teamcenter Visualization and Tecnomatix Plant Simulation products. This vulnerability can be triggered while the affected applications process specially crafted WRL files. Successful exploitation may allow an attacker to potentially execute arbitrary code within the context of the application, thereby resulting in unauthorized actions. It is crucial for users of impacted products to apply the necessary updates to mitigate associated risks.
Affected Version(s)
Teamcenter Visualization V14.2 0
Teamcenter Visualization V14.3 0
Teamcenter Visualization V2312 0
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved