CVE-2025-23397: Buffer Overflow
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23397?
CVE-2025-23397 has been classified with moderate severity due to the potential impact on system security.
How do I fix CVE-2025-23397?
To fix CVE-2025-23397, users should update to the latest versions of Teamcenter Visualization and Tecnomatix Plant Simulation as specified in the vulnerability notice.
Which versions are affected by CVE-2025-23397?
CVE-2025-23397 affects all versions of Teamcenter Visualization prior to V14.3.0.13, V2312.0009, V2406.0007, V2412.0002, and Tecnomatix Plant Simulation prior to V2302.0021 and V2404.0010.
What products are impacted by CVE-2025-23397?
CVE-2025-23397 impacts Siemens Teamcenter Visualization and Siemens Tecnomatix Plant Simulation products.
Is there a workaround for CVE-2025-23397?
Currently, there are no known workarounds for CVE-2025-23397; upgrading to the latest versions is recommended.