CVE-2025-25266CWE-552

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions <…

High · published March 11, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict access to the file deletion functionality.

This could allow an unauthorized attacker to delete files even when access to the system should be prohibited, resulting in potential data loss or unauthorized modification of system files.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00154 · 4.2th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2025-03-11T09:48Z
EPSS history
Timeline
  • 11 MAR 09:48Z
    A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions <…
    cvelistv5