CVE-2024-45470: High severity siemens tecnomatix plant simulation vulnerability
A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45470?
CVE-2024-45470 is classified as a high severity vulnerability due to its potential impact on the affected systems.
How do I fix CVE-2024-45470?
To mitigate CVE-2024-45470, update to Teamcenter Visualization V14.2.0.14 or later, V14.3.0.12 or later, or V2312.0008 or later depending on your version.
What versions are affected by CVE-2024-45470?
CVE-2024-45470 affects all versions of Teamcenter Visualization prior to V14.2.0.14, V14.3.0.12, V2312.0008, and Tecnomatix Plant Simulation prior to V2302.0016.
Is there a workaround for CVE-2024-45470?
There are no specific workarounds for CVE-2024-45470; the recommended action is to apply the necessary updates.
What products are impacted by CVE-2024-45470?
CVE-2024-45470 impacts Siemens Teamcenter Visualization and Siemens Tecnomatix Plant Simulation across specified vulnerable versions.