CVE-2026-33893

State: Published
Severity: 8.7 High
Published: May 12, 2026
Updated: May 12, 2026
Reserved: Mar 24, 2026

Description

A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.0005), Teamcenter V2512 (All versions). The affected application contains hardcoded key which is used for obfuscation stored directly into the application. This could allow an attacker to obtain these keys and misuse them to gain unauthorized access.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	siemens
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	siemens

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
Teamcenter V2312Siemens	before V2312.0014Affected
Teamcenter V2406Siemens	before V2406.0012Affected
Teamcenter V2412Siemens	before V2412.0009Affected
Teamcenter V2506Siemens	before V2506.0005Affected
Teamcenter V2512Siemens	all versionsNot affected

References

https://cert-portal.siemens.com/productcert/html/ssa-827383.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.