Vulnerability details
CVE-2025-23401
Siemens Teamcenter VisualizationSiemens Teamcenter Visualization V2312Siemens Teamcenter Visualization V2406Siemens Teamcenter Visualization V2412Siemens Tecnomatix Plant Simulation V2302Siemens Tecnomatix Plant Simulation V2404
CVSS 4.0
7.3High
Official description
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.3High | 4.0 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 7.8High | 3.1 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Siemens | Teamcenter Visualization V14.3 | v < V14.3.0.13 | CVEProject cvelistV5 (CNA) |
| Siemens | Teamcenter Visualization V2312 | v < V2312.0009 | CVEProject cvelistV5 (CNA) |
| Siemens | Teamcenter Visualization V2406 | v < V2406.0007 | CVEProject cvelistV5 (CNA) |
| Siemens | Teamcenter Visualization V2412 | v < V2412.0002 | CVEProject cvelistV5 (CNA) |
| Siemens | Tecnomatix Plant Simulation V2302 | v < V2302.0021 | CVEProject cvelistV5 (CNA) |
| Siemens | Tecnomatix Plant Simulation V2404 | v < V2404.0010 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-03-11
- Last updated
- 2025-03-11
- State
- Published
- Assigner (CNA)
- siemens
Exploit prediction (EPSS)
0.15%
Probability of exploitation in 30 days
4.8%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-125Out-of-bounds Read