CVE-2025-25267CWE-552

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions <…

Medium · published March 11, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
5.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00165 · 5.4th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2025-03-11T09:48Z
EPSS history
Timeline
  • 11 MAR 09:48Z
    A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions <…
    cvelistv5