Siemens Teamcenter Visualization Out-of-Bounds Read (SSA-542540)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(272735);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/11/05");

  script_cve_id("CVE-2025-32454");
  script_xref(name:"IAVA", value:"2025-A-0329");

  script_name(english:"Siemens Teamcenter Visualization Out-of-Bounds Read (SSA-542540)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The version of Siemens Teamcenter Visualization installed on the remote host is affected by an out-of-bounds read 
vulnerability. The application contains an out of bounds read past the end of an allocated structure while parsing 
specially crafted WRL files. If a user is tricked to open a malicious file, this could lead the application to crash 
or potentially lead to arbitrary code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://cert-portal.siemens.com/productcert/html/ssa-542540.html");
  script_set_attribute(attribute:"solution", value:
"Update to Siemens Teamcenter Visualization version 14.3.0.14, 2312.0010, 2406.0008, 2412.0004, or later.");
  script_set_attribute(attribute:"agent", value:"windows");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-32454");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/05/13");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/05/13");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/11/05");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:siemens:teamcenter_visualization");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("siemens_teamcenter_visualization_installed.nbin");
  script_require_keys("installed_sw/Siemens Teamcenter Visualization");

  exit(0);
}

include('vcf.inc');

var app_info = vcf::get_app_info(app:'Siemens Teamcenter Visualization', win_local:TRUE);

var constraints = [
  { 'min_version': '14.0', 'fixed_version' : '14.3.0.14' },
  { 'min_version': '2312.0', 'fixed_version' : '2312.0010' },
  { 'min_version': '2406.0', 'fixed_version' : '2406.0008' },
  { 'min_version': '2412.0', 'fixed_version' : '2412.0004' }
];

vcf::check_version_and_report(
  app_info:app_info,
  constraints:constraints,
  severity:SECURITY_HOLE
);