Siemens Teamcenter Hardcoded Key Vulnerability Allowing Unauthorized Access

A vulnerability exists in Siemens Teamcenter versions V2312 (all versions prior to V2312.0014), V2406 (all versions prior to V2406.0012), V2412 (all versions prior to V2412.0009), V2506 (all versions prior to V2506.0005), and V2512 (all versions). The issue arises from a hardcoded key used for obfuscation, which is embedded directly in the application. This vulnerability could enable an attacker to extract these keys and misuse them to gain unauthorized access.

Impact

Exploitation of this vulnerability could lead to unauthorized access by allowing attackers to obtain and misuse hardcoded keys embedded in the application.

Remediation

Siemens has released new versions for the affected products. Users are advised to update to the latest versions. For Teamcenter V2512, no action is needed as the vulnerable component is not present.