Out of Bound Read Vulnerability in Teamcenter Visualization and Tecnomatix Plant Simulation
CVE-2025-23399

7.3HIGH

Key Information:

Vendor
Siemens
Status
Teamcenter Visualization V14.3
Teamcenter Visualization V2312
Teamcenter Visualization V2406
Teamcenter Visualization V2412
Vendor
CVE Published:
11 March 2025

Summary

An out of bounds read vulnerability has been discovered in specific versions of Teamcenter Visualization and Tecnomatix Plant Simulation. This issue arises when these applications parse specially crafted WRL files, potentially allowing an unauthorized attacker to execute code within the context of the current process. Users of the affected products should take immediate action to apply available patches and updates to mitigate any risks associated with this vulnerability.

Affected Version(s)

Teamcenter Visualization V14.3 0

Teamcenter Visualization V2312 0

Teamcenter Visualization V2406 0

References

https://cert-portal.siemens.com/productcert/html/ssa-0504...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.