CVE-2025-25266

CVSS 3.1 Score 6.8 of 10 (medium)

Details

Published Mar 11, 2025
CWE ID 552

Summary

CVE-2025-25266 is a vulnerability affecting Tecnomatix Plant Simulation V2302 (all versions below V2302.0021) and V2404 (all versions below V2404.0010). The issue lies in the inadequate access restrictions of the file deletion functionality in these versions. An unauthorized attacker can exploit this vulnerability to delete files, potentially leading to significant data loss or unauthorized system file modifications, even when system access should be denied.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share