Sign-up

ID

VAR-202410-0103


CVE

CVE-2024-45472


TITLE

Siemens'  Tecnomatix Plant Simulation  Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2024-010361

DESCRIPTION

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. An attacker could leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Siemens' Tecnomatix Plant Simulation Exists in unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2024-45472 // JVNDB: JVNDB-2024-010361

AFFECTED PRODUCTS

vendor:siemensmodel:tecnomatix plant simulationscope:gteversion:2303.0000

Trust: 1.0

vendor:siemensmodel:tecnomatix plant simulationscope:ltversion:2404.0005

Trust: 1.0

vendor:siemensmodel:tecnomatix plant simulationscope:ltversion:2302.0016

Trust: 1.0

vendor:シーメンスmodel:tecnomatix plant simulationscope:eqversion:2303.0000 that's all 2404.0005

Trust: 0.8

vendor:シーメンスmodel:tecnomatix plant simulationscope:eqversion: -

Trust: 0.8

vendor:シーメンスmodel:tecnomatix plant simulationscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:tecnomatix plant simulationscope:eqversion:2302.0016

Trust: 0.8

sources: JVNDB: JVNDB-2024-010361 // NVD: CVE-2024-45472

CVSS

SEVERITY

CVSSV2

CVSSV3

productcert@siemens.com: CVE-2024-45472
value: HIGH

Trust: 1.0

nvd@nist.gov: CVE-2024-45472
value: HIGH

Trust: 1.0

NVD: CVE-2024-45472
value: HIGH

Trust: 0.8

productcert@siemens.com: CVE-2024-45472
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 2.0

NVD: CVE-2024-45472
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2024-010361 // NVD: CVE-2024-45472 // NVD: CVE-2024-45472

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.0

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:Buffer error (CWE-119) [ others ]

Trust: 0.8

problemtype: Lack of information (CWE-noinfo) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2024-010361 // NVD: CVE-2024-45472

EXTERNAL IDS

db:NVDid:CVE-2024-45472

Trust: 2.6

db:SIEMENSid:SSA-583523

Trust: 1.8

db:SIEMENSid:SSA-645131

Trust: 1.0

db:JVNid:JVNVU91585837

Trust: 0.8

db:ICS CERTid:ICSA-24-284-13

Trust: 0.8

db:JVNDBid:JVNDB-2024-010361

Trust: 0.8

sources: JVNDB: JVNDB-2024-010361 // NVD: CVE-2024-45472

REFERENCES

url:https://cert-portal.siemens.com/productcert/html/ssa-583523.html

Trust: 1.8

url:https://cert-portal.siemens.com/productcert/html/ssa-645131.html

Trust: 1.0

url:https://jvn.jp/vu/jvnvu91585837/

Trust: 0.8

url:https://nvd.nist.gov/vuln/detail/cve-2024-45472

Trust: 0.8

url:https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-13

Trust: 0.8

sources: JVNDB: JVNDB-2024-010361 // NVD: CVE-2024-45472

SOURCES

db:JVNDBid:JVNDB-2024-010361
db:NVDid:CVE-2024-45472

LAST UPDATE DATE

2024-12-10T21:56:27.733000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2024-010361date:2024-10-16T06:26:00
db:NVDid:CVE-2024-45472date:2024-12-10T14:30:43.263

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2024-010361date:2024-10-16T00:00:00
db:NVDid:CVE-2024-45472date:2024-10-08T09:15:14.557