CVE-2025-23402
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), …
Impact
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted WRL files. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Teamcenter Visualization | from 14.0.0 before 14.3.0.13 from 2312.0 before 2312.0009 from 2406.0 before 2406.0007 from 2412.0 before 2412.0002 |
| Siemens | Tecnomatix Plant Simulation | from 2302.0 before 2302.0021 from 2404.0 before 2404.0010 |