CVE-2024-45476

· LOWModified

← All CVEs

CVSS v3.1

3.3

CVSS v4.0

4.8

EPSS

0.17%

Published

Oct 8, 2024

Modified

Dec 10, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted WRL files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-476

Affected Products (2)

siemens · tecnomatix_plant_simulation (up to 2302.0016)vulnerable

siemens · tecnomatix_plant_simulation (up to 2404.0005)vulnerable

References (2)

https://cert-portal.siemens.com/productcert/html/ssa-583523.html

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-645131.html

KEV Catalog EPSS Scores Vendors All CVEs