Vulnerability Description
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Teamcenter Visualization | >= 14.0.0, < 14.3.0.13 |
| Siemens | Tecnomatix Plant Simulation | >= 2302.0, < 2302.0021 |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-23396?
CVE-2025-23396 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versi...
How severe is CVE-2025-23396?
CVE-2025-23396 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-23396?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Teamcenter Visualization, Siemens Tecnomatix Plant Simulation.