CVE-2025-23396: High severity siemens teamcenter visualization vulnerability
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23396?
The severity of CVE-2025-23396 is classified as high due to its potential impact on system confidentiality and integrity.
How do I fix CVE-2025-23396?
To fix CVE-2025-23396, update your software to the latest versions: V14.3.0.13 or later, V2312.0009 or later, V2406.0007 or later, and V2412.0002 or later.
What software is affected by CVE-2025-23396?
CVE-2025-23396 affects Siemens Teamcenter Visualization and Tecnomatix Plant Simulation versions below the specified updates.
Is CVE-2025-23396 part of any existing threat exploits?
CVE-2025-23396 has not been associated with any publicly known exploits as of now.
What are the potential risks of CVE-2025-23396?
The potential risks of CVE-2025-23396 include unauthorized access to sensitive data and possible manipulation of system operations.