The vulnerability of Siemens Teamcenter Visualization’s lifecycle management system and Siemens Tecnomatix Plant Simulation’s software environment for modeling systems and processes lies in the reading of data beyond the buffer in memory. This allows attackers to execute arbitrary code.

🗓️ 24 Mar 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 15 Views

Buffer overread in Siemens Teamcenter Visualization and Tecnomatix Plant Simulation enables code execution via WRL files.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-27438	11 Mar 202511:35	–	circl
CNNVD	Siemens Teamcenter 缓冲区错误漏洞	11 Mar 202500:00	–	cnnvd
CVE	CVE-2025-27438	11 Mar 202509:48	–	cve
Cvelist	CVE-2025-27438	11 Mar 202509:48	–	cvelist
EUVD	EUVD-2025-7781	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	11 Mar 202512:30	–	ncsc
NVD	CVE-2025-27438	11 Mar 202510:15	–	nvd
OSV	CVE-2025-27438	11 Mar 202510:15	–	osv
RedhatCVE	CVE-2025-27438	13 Mar 202517:04	–	redhatcve
Tenable Nessus	Siemens Teamcenter Visualization Multiple Vulnerabilities (SSA-050438)	14 Mar 202500:00	–	nessus

Vulners

Node

siemens_ag teamcenter_visualizationRange<2312.0009

OR

siemens_ag teamcenter_visualizationRange<2406.0007

OR

siemens_ag teamcenter_visualizationRange<2412.0002

OR

siemens_ag tecnomatix_plant_simulationRange<2302.0021

OR

siemens_ag tecnomatix_plant_simulationRange<2404.0010

OR

siemens_ag teamcenter_visualizationRange14.3.0.13≥

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-050438.html
cisa	www.cisa.gov/news-events/ics-advisories/icsa-25-072-01
web	www.web.nvd.nist.gov/view/vuln/detail

24 Mar 2025 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 27.2

CVSS 37.8

EPSS0.00152

Siemens Teamcenter Visualization Tecnomatix Plant Simulation Buffer overread Code execution World file format