CVE-2025-25267

State: Published
Severity: 6.9 Medium
Published: Mar 11, 2025
Updated: Mar 11, 2025
Reserved: Feb 6, 2025

Description

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.

Scores

CVSS	Score	Vector	Source
4.0	6.9 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	siemens
3.1	6.2 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	siemens

Weaknesses

CWE-552 Files or Directories Accessible to External Parties

Affected Products

Product	Versions
Tecnomatix Plant Simulation V2302Siemens	before V2302.0021Affected
Tecnomatix Plant Simulation V2404Siemens	before V2404.0010Affected

References

https://cert-portal.siemens.com/productcert/html/ssa-507653.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.