Stack-Based Overflow Vulnerability in Teamcenter and Tecnomatix Products by Siemens

CVE-2024-52572

What is CVE-2024-52572?

A significant vulnerability has been discovered in Siemens' Teamcenter Visualization and Tecnomatix Plant Simulation products, specifically affecting various versions that have not been updated. This vulnerability involves a stack-based overflow that can occur during the parsing of specially crafted WRL files. As a result, it presents a risk allowing an attacker to execute arbitrary code within the context of the affected applications. Mitigation strategies should be employed immediately by updating to the specified non-vulnerable versions to safeguard against potential exploits.

References