CVE-2024-45476 LOW

CVE-2024-45476

Vendor Siemens
Product Teamcenter Visualization V14.2
Weakness CWE-476
Published October 8, 2024
Last update December 10, 2024
View on NVD All CVEs

CVSS base score

3.3/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted WRL files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Key dates

02Disclosure timeline

October 8, 2024 CVE published
December 10, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-39853 Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service CVE-2025-7700 Ffmpeg: null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c) CVE-2026-28389 Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo CVE-2021-42263 Adobe Premiere Pro Null Pointer Dereference Application denial-of-service CVE-2023-21593 Adobe InDesign SVG file NULL Pointer Dereference Application denial-of-service