CVE-2024-45475: Buffer Overflow
First published: Tue Oct 08 2024(Updated: )
A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. An attacker could leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Tecnomatix Plant Simulation | <2302.0016 | |
| Siemens Tecnomatix Plant Simulation | >=2303.0000<2404.0005 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-45475?
CVE-2024-45475 has been classified with a medium severity rating.
How do I fix CVE-2024-45475?
To resolve CVE-2024-45475, update Siemens Teamcenter Visualization and Tecnomatix Plant Simulation to the latest versions.
Which versions are affected by CVE-2024-45475?
CVE-2024-45475 affects all versions of Teamcenter Visualization prior to V14.2.0.14, V14.3.0.12, and Tecnomatix Plant Simulation versions below 2302.0016.
What products does CVE-2024-45475 impact?
CVE-2024-45475 impacts Siemens Teamcenter Visualization and Tecnomatix Plant Simulation software.
Is there a workaround for CVE-2024-45475?
There are no official workarounds for CVE-2024-45475; users are advised to update to the fixed versions.
- agent/weakness
- agent/first-publish-date
- agent/type
- agent/author
- agent/severity
- agent/event
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/description
- agent/source
- vendor/siemens
- canonical/siemens tecnomatix plant simulation
- version/siemens tecnomatix plant simulation/2303.0000