CVE-2025-27438: High severity Siemens Teamcenter Visualization vulnerability
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Teamcenter Visualization V14.3to a version that resolves this vulnerability.Fixed in V14.3.0.13 - Upgrade
Upgrade
Teamcenter Visualization V2312to a version that resolves this vulnerability.Fixed in V2312.0009 - Upgrade
Upgrade
Teamcenter Visualization V2406to a version that resolves this vulnerability.Fixed in V2406.0007 - Upgrade
Upgrade
Teamcenter Visualization V2412to a version that resolves this vulnerability.Fixed in V2412.0002 - Upgrade
Upgrade
Tecnomatix Plant Simulation V2302to a version that resolves this vulnerability.Fixed in V2302.0021 - Upgrade
Upgrade
Tecnomatix Plant Simulation V2404to a version that resolves this vulnerability.Fixed in V2404.0010
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27438?
The CVE-2025-27438 vulnerability is rated as a critical security issue affecting multiple versions of Siemens Teamcenter Visualization and Tecnomatix Plant Simulation.
Which versions are affected by CVE-2025-27438?
CVE-2025-27438 affects all versions of Siemens Teamcenter Visualization prior to V14.3.0.13, V2312 prior to V2312.0009, V2406 prior to V2406.0007, and V2412 prior to V2412.0002, as well as specific versions of Tecnomatix Plant Simulation.
How do I fix CVE-2025-27438?
To mitigate CVE-2025-27438, users should upgrade to the latest patched versions of Siemens Teamcenter Visualization or Tecnomatix Plant Simulation.
What products are impacted by CVE-2025-27438?
CVE-2025-27438 impacts Siemens Teamcenter Visualization and Siemens Tecnomatix Plant Simulation software.
Is there a workaround for CVE-2025-27438?
Currently, there are no known effective workarounds for CVE-2025-27438, so upgrading the software is recommended.