Cyber Posture

CVE-2025-27438

High

Published: 11 March 2025

Published
11 March 2025
Modified
23 September 2025
KEV Added
Patch
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0012 30.7th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-27438 is a high-severity Out-of-bounds Read (CWE-125) vulnerability in Siemens Teamcenter Visualization. Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 30.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and RA-5 (Vulnerability Monitoring and Scanning).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Client Execution (T1203) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly mitigates the out-of-bounds read vulnerability by requiring timely patching of the affected Teamcenter Visualization and Tecnomatix Plant Simulation versions as specified in the Siemens advisory.

prevent

Implements memory safety mechanisms such as address space randomization and non-executable memory to prevent arbitrary code execution from out-of-bounds reads during WRL file parsing.

detect

Enables identification of vulnerable software versions through vulnerability scanning, allowing prioritization of remediation for this specific CVE in affected Siemens applications.

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1204.002 Malicious File Execution
An adversary may rely upon a user opening a malicious file in order to gain execution.
Why these techniques?

The vulnerability is a memory corruption flaw in a client-side file parser (WRL/VRML) that enables arbitrary code execution upon opening a malicious file, directly facilitating T1203 (Exploitation for Client Execution) and T1204.002 (Malicious File) with user interaction required.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

NVD Description

A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions…

more

< V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.

Deeper analysisAI

CVE-2025-27438 is an out-of-bounds read vulnerability (CWE-125) affecting multiple versions of Siemens Teamcenter Visualization and Tecnomatix Plant Simulation. Specifically, it impacts Teamcenter Visualization V14.3 (all versions prior to V14.3.0.13), V2312 (prior to V2312.0009), V2406 (prior to V2406.0007), and V2412 (prior to V2412.0002); as well as Tecnomatix Plant Simulation V2302 (prior to V2302.0021) and V2404 (prior to V2404.0010). The flaw occurs when parsing specially crafted WRL files, leading to a read past the end of an allocated structure.

The vulnerability has a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating it requires local access, low attack complexity, no privileges, and user interaction. An attacker could exploit it by convincing a user to open a malicious WRL file in one of the affected applications, potentially achieving arbitrary code execution in the context of the current process with high confidentiality, integrity, and availability impacts.

Siemens Security Advisory SSA-050438 provides details on mitigation, recommending updates to the following patched versions: Teamcenter Visualization V14.3.0.13, V2312.0009, V2406.0007, V2412.0002; Tecnomatix Plant Simulation V2302.0021 and V2404.0010. Additional guidance is available at https://cert-portal.siemens.com/productcert/html/ssa-050438.html.

Details

CWE(s)

Affected Products

siemens
teamcenter visualization
14.3 — 14.3.0.13 · 2312.0 — 2312.0009 · 2406.0 — 2406.0007
siemens
tecnomatix plant simulation
2302.0 — 2302.0021 · 2404.0 — 2404.0010 · 2412.0 — 2412.0002

CVEs Like This One

CVE-2025-23401Same product: Siemens Teamcenter Visualization
CVE-2025-23399Same product: Siemens Teamcenter Visualization
CVE-2025-23397Same product: Siemens Teamcenter Visualization
CVE-2025-23402Same product: Siemens Teamcenter Visualization
CVE-2025-23398Same product: Siemens Teamcenter Visualization
CVE-2025-23396Same product: Siemens Teamcenter Visualization
CVE-2025-23400Same product: Siemens Teamcenter Visualization
CVE-2026-23720Same vendor: Siemens
CVE-2026-23716Same vendor: Siemens
CVE-2026-23717Same vendor: Siemens

References