PatchSiren cyber security CVE debrief

CVE-2024-45472 Siemens CVE debrief

A memory corruption vulnerability in Siemens Teamcenter Visualization allows code execution when parsing malicious WRL files. The flaw, published 2024-12-10 and last modified 2025-05-06, carries a CVSS 3.1 score of 7.8 (HIGH). Affected versions include V14.2, V14.3, and V2312. Siemens has released patched versions, and CISA recommends updating immediately while avoiding untrusted WRL files.

Vendor: Siemens
Product: Tecnomatix Plant Simulation V2302
CVSS: HIGH 7.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2024-12-10
Original CVE updated: 2025-05-06
Advisory published: 2024-12-10
Advisory updated: 2025-05-06

Who should care

Organizations using Siemens Teamcenter Visualization for product lifecycle management and visualization, particularly in industrial and manufacturing environments where WRL/VRML files are exchanged. Security teams responsible for ICS/OT asset protection and patch management should prioritize this update due to the HIGH severity and potential for code execution.

Technical summary

CVE-2024-45472 is a memory corruption vulnerability in Siemens Teamcenter Visualization affecting versions V14.2, V14.3, and V2312. The flaw occurs during parsing of specially crafted WRL (VRML) files and can lead to arbitrary code execution in the context of the current process. The vulnerability requires local access and user interaction (opening a malicious file), with low attack complexity. CVSS 3.1 vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Siemens released security updates in December 2024; CISA published advisory ICSA-24-347-09 on 2024-12-10 with a revision on 2025-05-06 correcting typos.

Defensive priority

high

Recommended defensive actions

Update Teamcenter Visualization V14.2 to version 14.2.0.14 or later
Update Teamcenter Visualization V14.3 to version 14.3.0.12 or later
Update Teamcenter Visualization V2312 to version V2312.0008 or later
Do not open untrusted WRL files in affected applications
Apply defense-in-depth strategies for industrial control systems per CISA guidance

Evidence notes

CVE published 2024-12-10; modified 2025-05-06. Source: CISA CSAF advisory ICSA-24-347-09. Vendor fix versions confirmed in CSAF remediations section.

Sources and references

Verified primary and authoritative sources

CVE-2024-45472 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2024-45472

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2024-45472 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-45472

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source item URL
Unverified legacy reference

URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-284-13.json

cisa_csaf
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/csaf/ssa-583523.json

Reference
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/html/ssa-583523.html

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-13

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/topics/industrial-control-systems

Reference
Source reference
Unverified legacy reference

URL: https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.