CVE-2024-52567

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 18, 2024
Updated: Dec 10, 2024
CWE ID 125

Summary

CVE-2024-52567 is a newly discovered vulnerability affecting Teamcenter Visualization V14.2, V14.3, V2312, V2406, Tecnomatix Plant Simulation V2302, and V2404. These applications contain an out-of-bounds read issue when parsing maliciously crafted WRL files. Consequences of this vulnerability include an attacker's ability to execute code in the context of the current process, potentially leading to serious security risks. Versions prior to V14.2.0.14, V14.3.0.12, V2312.0008, V2406.0005, V2302.0018, and V2404.0007 are affected, and immediate updates are strongly recommended. (Source: ZDI-CAN-24237)

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share