Siemens Teamcenter
Teamcenter is affected by XML External Entity Injection (XXE, CVE-2022-29801) and a stack based buffer overflow vulnerability (CVE-2022-24290). XXE impacts only Teamcenter versions before V13.1. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-29801US | high7.5 | — | ||
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9). The application contains a XML External Entity Inj… | ||||
| CVE-2022-24290US | high7.5 | — | ||
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2… | ||||
references
External citations — patches, advisories, analysis.
- SSA-789162: Vulnerabilities in Teamcenter - CSAF Versionself
- SSA-789162: Vulnerabilities in Teamcenter - PDF Versionself
- SSA-789162: Vulnerabilities in Teamcenter - TXT Versionself
- ICS Advisory ICSA-22-132-16 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-132-16 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (22)
- MitigationTeamcenter V12.4
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V12.4
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.0
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.0
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.1
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.2
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.3
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V14.0
Harden the application’s host to prevent local access by untrusted personnel
- No fix plannedTeamcenter V12.4
Currently no fix is planned
- No fix plannedTeamcenter V12.4
Currently no fix is planned
- No fix plannedTeamcenter V13.0
Currently no fix is planned
- No fix plannedTeamcenter V13.0
Currently no fix is planned
- No fix plannedTeamcenter V13.2
Currently no fix is planned
- No fix plannedTeamcenter V13.3
Currently no fix is planned
- FixedTeamcenter V12.4
Update to V12.4.0.13 or later version
https://support.sw.siemens.com/ - FixedTeamcenter V12.4
Update to V12.4.0.13 or later version
https://support.sw.siemens.com/ - FixedTeamcenter V13.0
Update to V13.0.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter V13.0
Update to V13.0.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter V13.1
Update to V13.1.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter V13.2
Update to V13.2.0.8 or later version
https://support.sw.siemens.com/ - FixedTeamcenter V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - FixedTeamcenter V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan