Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.3
CVE-2024-45466: Teamcenter Visualization and Tecnomatix Plant Simulation: Malicious File Execution Risk
CVE-2024-45466 · published 2 years ago
Summary
The Teamcenter Visualization and Tecnomatix Plant Simulation software contains a bug that can allow an attacker to execute malicious code on your computer. This could happen if a specially crafted file is opened or viewed. To stay safe, update your software to the latest version.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| siemens | tecnomatix_plant_simulation |
< 2302.0016 >= 2303.0000, < 2404.0005 cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:* |
Original advisory text
A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All ve...
A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-125Out-of-bounds Read
Timeline
Published8 Oct 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-45466 · NVD
Track software like this
Free during beta