CVE-2025-25267
Medium
Description
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.
SeverityMedium
CVSS6.2
Exploit probability—
ProductSiemens Tecnomatix Plant Simulation
PublishedMar 11, 2025
First seenMar 11, 2025
Weakness typeCWE-552CWE-552
How to fix
Update
- siemens tecnomatix_plant_simulation2302.0021, 2404.0010 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens tecnomatix_plant_simulation | 2302.0 ≤ v < 2302.0021, 2404.0 ≤ v < 2404.0010 | 2302.0021, 2404.0010 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.