CVE-2024-52565: 
Siemens Tecnomatix Plant Simulation vulnerability analysis and mitigation

A critical out-of-bounds write vulnerability (CVE-2024-52565) has been identified in multiple versions of Siemens Teamcenter Visualization and Tecnomatix Plant Simulation software. The vulnerability affects Teamcenter Visualization V14.2 (versions < V14.2.0.14), V14.3 (versions < V14.3.0.12), V2312 (versions < V2312.0008), V2406 (versions < V2406.0005), and Tecnomatix Plant Simulation V2302 (versions < V2302.0018) and V2404 (versions < V2404.0007). The vulnerability was discovered and reported through the Zero Day Initiative (ZDI-CAN-24231) (Siemens Advisory, ZDI Advisory).

The vulnerability is classified as an out-of-bounds write (CWE-787) that occurs when parsing specially crafted WRL files. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, and a CVSS v4.0 base score of 7.3 with the vector string CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N (Siemens Advisory).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current process. The vulnerability requires user interaction, specifically opening a malicious WRL file, but could lead to complete system compromise in terms of confidentiality, integrity, and availability (Siemens Advisory).

Siemens has released security updates to address this vulnerability and recommends users update to the following versions: Teamcenter Visualization V14.2: Update to V14.2.0.14 or later, V14.3: Update to V14.3.0.12 or later, V2312: Update to V2312.0008 or later, V2406: Update to V2406.0005 or later, Tecnomatix Plant Simulation V2302: Update to V2302.0018 or later, and V2404: Update to V2404.0007 or later. As a workaround, users are advised not to open untrusted WRL files in affected applications (Siemens Advisory).