{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-52572", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "state": "PUBLISHED", "assignerShortName": "siemens", "dateReserved": "2024-11-14T12:25:53.336Z", "datePublished": "2024-11-18T15:39:35.577Z", "dateUpdated": "2024-12-10T13:54:08.165Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2024-12-10T13:54:08.165Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain a stack based overflow vulnerability while parsing specially crafted WRL files.\r\nThis could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24486)"}], "affected": [{"vendor": "Siemens", "product": "Teamcenter Visualization V14.2", "versions": [{"status": "affected", "version": "0", "lessThan": "V14.2.0.14", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V14.3", "versions": [{"status": "affected", "version": "0", "lessThan": "V14.3.0.12", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V2312", "versions": [{"status": "affected", "version": "0", "lessThan": "V2312.0008", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V2406", "versions": [{"status": "affected", "version": "0", "lessThan": "V2406.0005", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Tecnomatix Plant Simulation V2302", "versions": [{"status": "affected", "version": "0", "lessThan": "V2302.0018", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Tecnomatix Plant Simulation V2404", "versions": [{"status": "affected", "version": "0", "lessThan": "V2404.0007", "versionType": "custom"}], "defaultStatus": "unknown"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}, {"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 7.3, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121: Stack-based Buffer Overflow", "type": "CWE"}]}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-824503.html"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-645131.html"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-52572", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-18T17:58:30.237542Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*"], "vendor": "siemens", "product": "tecnomatix_plant_simulation", "versions": [{"status": "affected", "version": "0", "lessThan": "2302.0018", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "2404.0007", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*"], "vendor": "siemens", "product": "tecnomatix_plant_simulation", "versions": [{"status": "affected", "version": "0", "lessThan": "2302.0018", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "2404.0007", "versionType": "custom"}], "defaultStatus": "unknown"}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-18T18:08:38.319Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-52572", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-18T17:58:30.237542Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*"], "vendor": "siemens", "product": "tecnomatix_plant_simulation", "versions": [{"status": "affected", "version": "0", "lessThan": "2302.0018", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "2404.0007", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*"], "vendor": "siemens", "product": "tecnomatix_plant_simulation", "versions": [{"status": "affected", "version": "0", "lessThan": "2302.0018", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "2404.0007", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-18T17:58:53.209Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}, {"cvssV4_0": {"version": "4.0", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "affected": [{"vendor": "Siemens", "product": "Teamcenter Visualization V14.2", "versions": [{"status": "affected", "version": "0", "lessThan": "V14.2.0.14", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V14.3", "versions": [{"status": "affected", "version": "0", "lessThan": "V14.3.0.12", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V2312", "versions": [{"status": "affected", "version": "0", "lessThan": "V2312.0008", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V2406", "versions": [{"status": "affected", "version": "0", "lessThan": "V2406.0005", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Tecnomatix Plant Simulation V2302", "versions": [{"status": "affected", "version": "0", "lessThan": "V2302.0018", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Tecnomatix Plant Simulation V2404", "versions": [{"status": "affected", "version": "0", "lessThan": "V2404.0007", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-824503.html"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-645131.html"}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain a stack based overflow vulnerability while parsing specially crafted WRL files.\r\nThis could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24486)"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121: Stack-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2024-12-10T13:54:08.165Z"}}}, "cveMetadata": {"cveId": "CVE-2024-52572", "state": "PUBLISHED", "dateUpdated": "2024-12-10T13:54:08.165Z", "dateReserved": "2024-11-14T12:25:53.336Z", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "datePublished": "2024-11-18T15:39:35.577Z", "assignerShortName": "siemens"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*", "matchCriteriaId": "9CB96290-C77A-4C14-9E5B-4F99DB187B31", "versionEndExcluding": "2302.0018", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*", "matchCriteriaId": "49153630-5A8F-429E-A5AA-8D0C1737D166", "versionEndExcluding": "2404.0007", "versionStartIncluding": "2404.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain a stack based overflow vulnerability while parsing specially crafted WRL files.\r\nThis could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24486)"}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en Tecnomatix Plant Simulation V2302 (todas las versiones anteriores a V2302.0018) y Tecnomatix Plant Simulation V2404 (todas las versiones anteriores a V2404.0007). Las aplicaciones afectadas contienen una vulnerabilidad de desbordamiento de pila al analizar archivos WRL especialmente manipulados. Esto podr\u00eda permitir que un atacante ejecute c\u00f3digo en el contexto del proceso actual. (ZDI-CAN-24486)"}], "id": "CVE-2024-52572", "lastModified": "2024-12-10T14:30:46.097", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "LOCAL", "automatable": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityRequirements": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "recovery": "NOT_DEFINED", "safety": "NOT_DEFINED", "subsequentSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "subsequentSystemIntegrity": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnerabilityResponseEffort": "NOT_DEFINED", "vulnerableSystemAvailability": "HIGH", "vulnerableSystemConfidentiality": "HIGH", "vulnerableSystemIntegrity": "HIGH"}, "source": "[email protected]", "type": "Secondary"}]}, "published": "2024-11-18T16:15:28.767", "references": [{"source": "[email protected]", "url": "https://cert-portal.siemens.com/productcert/html/ssa-645131.html"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/html/ssa-824503.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "[email protected]", "type": "Primary"}]}

{}