CVE-2024-52570
Reported by siemens · Published November 18, 2024
A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24365)
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Teamcenter Visualization V2406 | Siemens | V2406.0005, 2406.0005 |
| Teamcenter Visualization V14.2 | Siemens | V14.2.0.14, 14.2.0.14 |
| Tecnomatix Plant Simulation V2404 | Siemens | V2404.0007, 2404.0007 |
| tecnomatix_plant_simulation | siemens | V2302.0018, 2404.0007, 2302.0018 |
| Teamcenter Visualization V14.3 | Siemens | V14.3.0.12, 14.3.0.12 |
| Teamcenter Visualization V2312 | Siemens | 2312.0008 |
| Tecnomatix Plant Simulation V2302 | Siemens | 2302.0018 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Teamcenter Visualization V14.2 | 0 |
| Siemens | Teamcenter Visualization V14.3 | 0 |
| Siemens | Teamcenter Visualization V2312 | 0 |
| Siemens | Teamcenter Visualization V2406 | 0 |
| Siemens | Tecnomatix Plant Simulation V2302 | 0 |
| Siemens | Tecnomatix Plant Simulation V2404 | 0 |
| siemens | tecnomatix_plant_simulation | 0, 0 |
| Siemens | Teamcenter Visualization V2406 | 0 |
| Siemens | Teamcenter Visualization V14.3 | 0 |
| Siemens | Tecnomatix Plant Simulation V2404 | 0 |
| Siemens | Teamcenter Visualization V14.2 | 0 |
| Siemens | Teamcenter Visualization V2312 | 0 |
| Siemens | Tecnomatix Plant Simulation V2302 | 0 |
Timeline
- Nov 18, 2024 Coalition ESS Score (8 in total, the first dated here)
- Nov 18, 2024 CVE Published
- Nov 18, 2024 PoC Published (3 in total, the first dated here)
- Nov 19, 2024 EPSS Score (30 in total, the first dated here)
- Jan 1, 2026 CVE Updated
- Apr 29, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-52570
vulnetix vdb fixes CVE-2024-52570Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-52570/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart