VDB
CISA-2024-45471
CISA-2024-45471
PUBLISHED
CVSS 7.8 HIGH
Reported by siemens · Published October 8, 2024
A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process.
Risk Scores
CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Teamcenter Visualization V14.2 | 0 |
| Siemens | Teamcenter Visualization V14.3 | 0 |
| Siemens | Teamcenter Visualization V2312 | 0 |
| Siemens | Tecnomatix Plant Simulation V2302 | 0 |
| Siemens | Tecnomatix Plant Simulation V2404 | 0 |
| Siemens | Tecnomatix Plant Simulation V2302 | 0, 0 |
| Siemens | Teamcenter Visualization V14.2 | 0, 0 |
| Siemens | Teamcenter Visualization V2312 | 0, 0 |
| siemens | tecnomatix_plant_simulation | 2302.0, 2404.0, 2302.0 |
| Siemens | Teamcenter Visualization V14.3 | 0, 0 |
| Siemens | Tecnomatix Plant Simulation V2404 | 0, 0 |
Timeline
- Oct 8, 2024 CVE Published
- Dec 10, 2024 CVE Updated