CVE-2025-23401: High severity siemens teamcenter visualization vulnerability
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23401?
The severity of CVE-2025-23401 has been classified as critical due to the potential for unauthorized access or modification of data.
How do I fix CVE-2025-23401?
To fix CVE-2025-23401, update your Siemens Teamcenter Visualization or Tecnomatix Plant Simulation software to the latest version specified in the vulnerability description.
What versions are affected by CVE-2025-23401?
CVE-2025-23401 affects all versions of Teamcenter Visualization below V14.3.0.13, V2312 before 2312.0009, V2406 before 2406.0007, and V2412 before 2412.0002, as well as Tecnomatix Plant Simulation below 2302.0021 and 2404.0010.
What are the consequences of CVE-2025-23401 if left unpatched?
If CVE-2025-23401 is left unpatched, attackers could exploit the vulnerability to gain unauthorized access to sensitive information and affect system integrity.
How can I prevent encountering CVE-2025-23401 in the future?
To prevent encountering CVE-2025-23401 in the future, regularly apply updates and patches from Siemens and conduct regular vulnerability assessments.