PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-52567 Siemens CVE debrief

CVE-2024-52567 is a high-severity out-of-bounds read vulnerability in Siemens Teamcenter Visualization affecting versions V14.2, V14.3, V2312, and V2406. The flaw occurs when parsing specially crafted WRL (VRML) files, allowing an attacker to execute arbitrary code in the context of the current process. Published on December 10, 2024, this vulnerability was reported through the Zero Day Initiative (ZDI-CAN-24237). The CVSS 3.1 score of 7.8 reflects high impacts to confidentiality, integrity, and availability, with a local attack vector requiring user interaction. Siemens has released security updates for all affected versions, and CISA recommends applying these patches promptly while avoiding untrusted WRL files as an interim mitigation.

Vendor
Siemens
Product
Teamcenter Visualization V14.2
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2024-12-10
Original CVE updated
2025-05-06
Advisory published
2024-12-10
Advisory updated
2025-05-06

Who should care

Organizations using Siemens Teamcenter Visualization for CAD data visualization and collaboration, particularly in industrial and manufacturing environments. Security teams responsible for ICS/OT asset protection should prioritize patching due to the high CVSS score and potential for code execution.

Technical summary

An out-of-bounds read vulnerability exists in Siemens Teamcenter Visualization when parsing specially crafted WRL (VRML) files. The vulnerability stems from reading past the end of an allocated structure during file parsing. Successful exploitation allows arbitrary code execution in the context of the current process. The attack requires local access and user interaction (opening a malicious WRL file). The vulnerability affects four product versions: V14.2, V14.3, V2312, and V2406. Siemens has released patched versions for all affected products.

Defensive priority

HIGH

Recommended defensive actions

  • Apply vendor security updates: Update Teamcenter Visualization V14.2 to V14.2.0.14 or later; V14.3 to V14.3.0.12 or later; V2312 to V2312.0008 or later; and V2406 to V2406.0005 or later.
  • As an interim mitigation, do not open untrusted WRL files in affected applications.
  • Implement defense-in-depth strategies for industrial control systems environments per CISA guidance.
  • Monitor for suspicious WRL file handling activity in affected environments.

Evidence notes

The vulnerability description and affected product versions are sourced from CISA CSAF advisory ICSA-24-347-09. The ZDI reference (ZDI-CAN-24237) indicates this was reported through Trend Micro's Zero Day Initiative. Siemens has published corresponding security advisory SSA-645131.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-52567 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-52567

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-52567 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-52567

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-347-09.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-645131.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-645131.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.