PT-2025-10736 · Siemens · Tecnomatix Plant Simulation

Published 2025-03-11 · Updated 2025-03-11 · CVE-2025-25267

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tecnomatix Plant Simulation versions prior to V2302.0021 Tecnomatix Plant Simulation versions prior to V2404.0010

Description The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.

Recommendations For versions prior to V2302.0021, update to V2302.0021 or later to resolve the issue. For versions prior to V2404.0010, update to V2404.0010 or later to resolve the issue.

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

BDU:2025-02894

CVE-2025-25267

Affected Products

Tecnomatix Plant Simulation

References · 6

• https://cert-portal.siemens.com/productcert/html/ssa-507653.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25267 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25267 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02894 · Security Note
• https://t.me/cvedetector/20067 · Telegram Post
• https://t.me/cvetracker/18924 · Telegram Post