The version of Siemens Teamcenter installed on the remote host is prior to 14.3.0.13, 2000.x prior to 2312.0009, 2400.x prior to 2406.0007, or 2412.x prior to 2412.0002. It is, therefore, affected by multiple vulnerabilities:

  - The affected application is vulnerable to memory corruption while parsing specially     crafted WRL files. This could allow an attacker to execute code in the context of     the current process. (CVE-2025-23400)

  - The affected applications contain an out of bounds read past the end of an allocated     structure while parsing specially crafted WRL files. This could allow an attacker to     execute code in the context of the current process. (CVE-2025-23401)

  - The affected applications contain a use-after-free vulnerability that could be triggered     while parsing specially crafted WRL files. An attacker could leverage this vulnerability     to execute code in the context of the current process. (CVE-2025-23402)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Siemens Teamcenter Multiple Vulnerabilities (SSA-050438)

high Nessus Plugin ID 232735

Version 1.2

Version 1.1

Version 1.2 May 16, 2025, 6:20 PM IAVM reference Plugin Feed: 202505161820
Version 1.1 Mar 15, 2025, 2:36 AM New Plugin Feed: 202503150236