Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-52566: Teamcenter Visualization: Malicious File Can Execute Code on Your Computer

CVE-2024-52566 · published 1 year ago

Summary

A security issue has been found in certain versions of Teamcenter Visualization and Tecnomatix Plant Simulation. If you open a specially crafted 3D file, an attacker might be able to run malicious code on your computer. To stay safe, update to the latest version of the software or patch the affected applications as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
siemens	tecnomatix_plant_simulation	< 2302.0018 >= 2404.0, < 2404.0007 `cpe:2.3:a:siemens:tecnomatix_plant_simulation::::::::`

Original advisory text

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file.
This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24233)

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.3 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-787Out-of-bounds Write

Timeline

Published18 Nov 2024

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2024-52566 · NVD

Track software like this

Free during beta