CVE-2024-45474: Buffer Overflow
First published: Tue Oct 08 2024(Updated: )
A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. An attacker could leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Tecnomatix Plant Simulation | <2302.0016 | |
| Siemens Tecnomatix Plant Simulation | >=2303.0000<2404.0005 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-45474?
CVE-2024-45474 has a high severity rating due to potential exploitation risks in affected Siemens products.
How do I fix CVE-2024-45474?
To fix CVE-2024-45474, update to the latest patched version of the affected software as specified by Siemens.
Which versions are affected by CVE-2024-45474?
CVE-2024-45474 affects all versions of Teamcenter Visualization prior to V14.2.0.14, V14.3.0.12, V2312.0008, and Tecnomatix Plant Simulation prior to V2302.0016.
What products are impacted by CVE-2024-45474?
CVE-2024-45474 impacts Teamcenter Visualization and Tecnomatix Plant Simulation across multiple versions.
Is there a workaround for CVE-2024-45474?
Currently, the recommended solution for CVE-2024-45474 is to apply the latest security updates rather than using a workaround.
- agent/weakness
- agent/first-publish-date
- agent/type
- agent/author
- agent/severity
- agent/event
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/description
- agent/source
- vendor/siemens
- canonical/siemens tecnomatix plant simulation
- version/siemens tecnomatix plant simulation/2303.0000