Siemens Teamcenter Visualization and Tecnomatix Plant Simulation Out-of-Bounds Read Vulnerability Allowing Code Execution

A vulnerability allowing out-of-bounds read past the end of an allocated structure has been identified in multiple versions of Siemens Teamcenter Visualization and Tecnomatix Plant Simulation. The issue arises while parsing specially crafted WRL files, potentially leading to memory corruption. This vulnerability could allow an attacker to execute code in the context of the current process.

Impact

Exploitation of this vulnerability could result in arbitrary code execution in the context of the current process.

Remediation

Siemens has released patches for the affected products. Users are advised to update to the latest versions. Specific update instructions can be found on the Siemens Support website.