Siemens Teamcenter Visualization Vulnerability: Stack-Based Overflow in WRL File Processing
CVE-2024-53041

7.8HIGH

Summary

A stack-based overflow vulnerability has been detected in multiple versions of Teamcenter Visualization and Tecnomatix Plant Simulation. The flaw occurs when these applications parse specially crafted WRL files. This vulnerability may enable an attacker to execute arbitrary code within the context of the current process, thereby posing a significant risk to users and systems relying on these applications. The affected versions span across Teamcenter Visualization V14.2, V14.3, and V2312, as well as multiple iterations of Tecnomatix Plant Simulation, necessitating prompt attention for those utilizing these products.

Affected Version(s)

Teamcenter Visualization V14.2 0

Teamcenter Visualization V14.3 0

Teamcenter Visualization V2312 0

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.