CVE-2024-52571: 
Siemens Tecnomatix Plant Simulation vulnerability analysis and mitigation

A critical out-of-bounds write vulnerability (CVE-2024-52571) has been identified in Siemens Teamcenter Visualization and Tecnomatix Plant Simulation software. The vulnerability affects multiple versions including Teamcenter Visualization V14.2 (versions < V14.2.0.14), V14.3 (versions < V14.3.0.12), V2312 (versions < V2312.0008), V2406 (versions < V2406.0005), and Tecnomatix Plant Simulation V2302 (versions < V2302.0018) and V2404 (versions < V2404.0007). The vulnerability was discovered and reported by Trend Micro Zero Day Initiative (ZDI, Siemens Advisory).

The vulnerability is an out-of-bounds write flaw that occurs when parsing specially crafted WRL files. It has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, and a CVSS v4.0 base score of 7.3 with vector string CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N. The vulnerability is tracked as CWE-787: Out-of-bounds Write (Siemens Advisory).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current process. The attack requires user interaction, specifically opening a malicious WRL file with the affected applications (CISA Advisory).

Siemens has released security updates to address this vulnerability and recommends users to update to the latest versions: Teamcenter Visualization V14.2.0.14 or later, V14.3.0.12 or later, V2312.0008 or later, V2406.0005 or later, and Tecnomatix Plant Simulation V2302.0018 or later, V2404.0007 or later. As a workaround, users are advised not to open untrusted WRL files in affected applications (Siemens Advisory).