PT-2025-20859 · Siemens · Teamcenter Visualization

Published 2025-05-13 · Updated 2025-07-15 · CVE-2025-32454

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Teamcenter Visualization versions prior to V14.3.0.14 Teamcenter Visualization versions prior to V2312.0010 Teamcenter Visualization versions prior to V2406.0008 Teamcenter Visualization versions prior to V2412.0004

Description: A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.

Recommendations: For versions prior to V14.3.0.14, update to V14.3.0.14 or later. For versions prior to V2312.0010, update to V2312.0010 or later. For versions prior to V2406.0008, update to V2406.0008 or later. For versions prior to V2412.0004, update to V2412.0004 or later.

Fix

RCE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-06607

CVE-2025-32454

Affected Products

Teamcenter Visualization

References · 10

• https://cert-portal.siemens.com/productcert/html/ssa-486186.html · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-542540.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06607 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-32454 · Security Note
• https://osv.dev/vulnerability/CVE-2025-32454 · Vendor Advisory
• https://t.me/latest_high_impact_cve/2352 · Telegram Post
• https://t.me/latest_high_impact_cve/2351 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1922326506904121556 · Twitter Post
• https://t.me/cvetracker/23710 · Telegram Post
• https://twitter.com/CVEnew/status/1922228935594549390 · Twitter Post