CVE-2024-52566

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 18, 2024
Updated: Dec 10, 2024
CWE ID 787

Summary

CVE-2024-52566 is a newly identified vulnerability affecting multiple versions of Teamcenter Visualization (V14.2, V14.3, V2312, V2406), as well as Tecnomatix Plant Simulation (V2302, V2404). These applications have an out-of-bounds write vulnerability while parsing a specially crafted WRL file. An attacker can exploit this issue to execute code in the context of the current process, potentially gaining unauthorized access or control. Versions prior to V14.2.0.14, V14.3.0.12, V2312.0008, V2406.0005, V2302.0018, and V2404.0007 are vulnerable to this attack (ZDI-CAN-24233).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share