CVE-2024-52566: 
Siemens Tecnomatix Plant Simulation vulnerability analysis and mitigation

A vulnerability (CVE-2024-52566) has been identified in multiple versions of Siemens Teamcenter Visualization and Tecnomatix Plant Simulation software. The vulnerability is an out-of-bounds write issue that occurs when parsing specially crafted WRL files. The affected versions include Teamcenter Visualization V14.2 (versions < V14.2.0.14), V14.3 (versions < V14.3.0.12), V2312 (versions < V2312.0008), V2406 (versions < V2406.0005), and Tecnomatix Plant Simulation V2302 (versions < V2302.0018) and V2404 (versions < V2404.0007) (Siemens Advisory, ZDI Advisory).

The vulnerability is classified as an out-of-bounds write (CWE-787) with a CVSS v3.1 base score of 7.8 (HIGH) and vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The CVSS v4.0 base score is 7.3 with vector string CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N. The issue specifically occurs during the parsing of WRL files, where improper validation of user-supplied data can result in a write operation past the end of an allocated object (Siemens Advisory, ZDI Advisory).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current process. The attack requires user interaction, specifically opening a malicious WRL file in the affected application (ZDI Advisory).

Siemens has released security updates to address this vulnerability and recommends users update to the following versions: Teamcenter Visualization V14.2.0.14 or later, V14.3.0.12 or later, V2312.0008 or later, V2406.0005 or later, and Tecnomatix Plant Simulation V2302.0018 or later, V2404.0007 or later. As a workaround, users are advised not to open untrusted WRL files in affected applications (Siemens Advisory).