CVE-2025-25267mediumCWE-552

CVE-2025-25267: falha de média gravidade em Siemens Tecnomatix Plant Simulation V2302

Publicada em

Seguir esta CVE+ Monitorar Tecnomatix Plant Simulation

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.2%
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Siemens · Tecnomatix Plant Simulation V2302Siemens · Tecnomatix Plant Simulation V2404
CVEs relacionadas — Siemens Tecnomatix Plant Simulation V2302

No mesmo produto, das mais perigosas para as menos.

CVE-2023-38075HIGHCVE-2023-38075EPSS 0.5%CVE-2023-38074HIGHCVE-2023-38074EPSS 0.5%CVE-2023-38072HIGHCVE-2023-38072EPSS 0.5%CVE-2023-38076HIGHCVE-2023-38076EPSS 0.4%CVE-2023-38071HIGHCVE-2023-38071EPSS 0.4%CVE-2023-38070HIGHCVE-2023-38070EPSS 0.4%