CVE-2022-24290

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2 (All versions < V13.2.0.8), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions < V14.0.0.2). The tcserver.exe binary in affected applications is vulnerable to a stack overflow condition during the parsing of user input that may lead the binary to crash.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
Siemens	Teamcenter V12.4	All versions < V12.4.0.13
Siemens	Teamcenter V13.0	All versions < V13.0.0.9
Siemens	Teamcenter V13.1	All versions
Siemens	Teamcenter V13.2	All versions < V13.2.0.8
Siemens	Teamcenter V13.3	All versions < V13.3.0.3
Siemens	Teamcenter V14.0	All versions < V14.0.0.2

References

https://cert-portal.siemens.com/productcert/pdf/ssa-789162.pdfMitigation, Patch, Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-789162.pdfMitigation, Patch, Vendor Advisory

Timeline

Published: May 20, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-242917.5Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.CVE-2022-242929.8Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.CVE-2022-242939.8Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.CVE-2022-242947.5A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The CVE-2022-242958.8Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially craft CVE-2022-242967.5Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning Syst CVE-2022-242976.7Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege vi CVE-2022-242987.5All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory co CVE-2022-242998.8Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus softwar CVE-2022-24305.4The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Block' feature in versio CVE-2022-243009.8Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta CVE-2022-243016.5In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.