CVE-2025-25267

Summary

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.

Affected Software

VendorProductVersion RangeStatus
SiemensTecnomatix Plant Simulation V23020 < V2302.0021affected
SiemensTecnomatix Plant Simulation V24040 < V2404.0010affected

Weaknesses

  • CWE-552: CWE-552: Files or Directories Accessible to External Parties

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References