CVE-2025-27438
Published: 11 March 2025
Description
An adversary may rely upon a user opening a malicious file in order to gain execution.
Security Summary
CVE-2025-27438 is an out-of-bounds read vulnerability (CWE-125) affecting multiple versions of Siemens Teamcenter Visualization and Tecnomatix Plant Simulation. Specifically, it impacts Teamcenter Visualization V14.3 (all versions prior to V14.3.0.13), V2312 (prior to V2312.0009), V2406 (prior to V2406.0007), and V2412 (prior to V2412.0002); as well as Tecnomatix Plant Simulation V2302 (prior to V2302.0021) and V2404 (prior to V2404.0010). The flaw occurs when parsing specially crafted WRL files, leading to a read past the end of an allocated structure.
The vulnerability has a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating it requires local access, low attack complexity, no privileges, and user interaction. An attacker could exploit it by convincing a user to open a malicious WRL file in one of the affected applications, potentially achieving arbitrary code execution in the context of the current process with high confidentiality, integrity, and availability impacts.
Siemens Security Advisory SSA-050438 provides details on mitigation, recommending updates to the following patched versions: Teamcenter Visualization V14.3.0.13, V2312.0009, V2406.0007, V2412.0002; Tecnomatix Plant Simulation V2302.0021 and V2404.0010. Additional guidance is available at https://cert-portal.siemens.com/productcert/html/ssa-050438.html.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The vulnerability is a memory corruption flaw in a client-side file parser (WRL/VRML) that enables arbitrary code execution upon opening a malicious file, directly facilitating T1203 (Exploitation for Client Execution) and T1204.002 (Malicious File) with user interaction required.