CVE-2024-53041: 
Siemens Tecnomatix Plant Simulation vulnerability analysis and mitigation

A stack-based buffer overflow vulnerability (CVE-2024-53041) has been identified in Siemens Teamcenter Visualization and Tecnomatix Plant Simulation products. The vulnerability affects multiple versions including Teamcenter Visualization V14.2 (versions < V14.2.0.14), V14.3 (versions < V14.3.0.12), V2312 (versions < V2312.0008), and Tecnomatix Plant Simulation V2302 (versions < V2302.0016) and V2404 (versions < V2404.0005). The vulnerability was discovered and reported by Rocco Calvi through the Zero Day Initiative, with initial disclosure on December 10, 2024 (Siemens Advisory, ZDI Advisory).

The vulnerability exists within the parsing of WRL files in the wrltojt module. The specific issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, and a CVSS v4.0 base score of 7.3 with the vector string CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N (ZDI Advisory, CISA Advisory).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current process. The vulnerability requires user interaction, as the target must visit a malicious page or open a malicious file (ZDI Advisory, Siemens Advisory).

Siemens has released security updates to address this vulnerability and recommends users to update to the latest versions: Teamcenter Visualization V14.2.0.14 or later, V14.3.0.12 or later, V2312.0008 or later, and Tecnomatix Plant Simulation V2302.0016 or later, V2404.0005 or later. As a workaround, users are advised not to open untrusted WRL files in affected applications (Siemens Advisory, CISA Advisory).