CVE-2025-25267 | THREATINT

Description

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.

Reserved 2025-02-06 | Published 2025-03-11 | Updated 2025-03-11 | Assigner siemens

MEDIUM: 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

MEDIUM: 6.9CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-552: Files or Directories Accessible to External Parties

Product status

Default status

unknown

Any version before V2302.0021

affected

Default status

unknown

Any version before V2404.0010

affected

References

cert-portal.siemens.com/productcert/html/ssa-507653.html

cve.org (CVE-2025-25267)

nvd.nist.gov (CVE-2025-25267)

Download JSON