CVE-2024-45472 - A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005)

Back Back to CVE browser

HIGH

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005)

Published Oct 8, 2024

7.3

HIGH

CVSS 4.0

EPSS 0.24%

Description

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. An attacker could leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.

Affected products

Vendor Siemens Product Teamcenter Visualization V14.2 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V14.2.0.14
Vendor Siemens Product Teamcenter Visualization V14.3 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V14.3.0.12
Vendor Siemens Product Teamcenter Visualization V2312 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2312.0008
Vendor Siemens Product Tecnomatix Plant Simulation V2302 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2302.0016
Vendor Siemens Product Tecnomatix Plant Simulation V2404 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2404.0005

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

Teamcenter Visualization V14.2

n/a

Version	Status	Constraints
0	affected	<V14.2.0.14

Siemens

Teamcenter Visualization V14.3

n/a

Version	Status	Constraints
0	affected	<V14.3.0.12

Siemens

Teamcenter Visualization V2312

n/a

Version	Status	Constraints
0	affected	<V2312.0008

Siemens

Tecnomatix Plant Simulation V2302

n/a

Version	Status	Constraints
0	affected	<V2302.0016

Siemens

Tecnomatix Plant Simulation V2404

n/a

Version	Status	Constraints
0	affected	<V2404.0005

Vendor Siemens Product Tecnomatix Plant Simulation Default
n/a
- Version
  2302.0
  Status
  affected
  Constraints
  <2302.0016
- Version
  2404.0
  Status
  affected
  Constraints
  <2404.0005

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

Tecnomatix Plant Simulation

n/a

Version	Status	Constraints
2302.0	affected	<2302.0016
2404.0	affected	<2404.0005

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-583523.html		Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-645131.html

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner siemens

Published Oct 8, 2024

Updated Dec 10, 2024

Reserved Aug 29, 2024

Link CVE-2024-45472

CISA Vulnrichment

Updated Oct 8, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-45472

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-45472