Vulnerability Details CVE-2025-25267
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.9%
CVSS Severity
CVSS v3 Score 6.2
Products affected by CVE-2025-25267
-
cpe:2.3:a:siemens:tecnomatix_plant_simulation:2302.0
-
cpe:2.3:a:siemens:tecnomatix_plant_simulation:2302.0004
-
cpe:2.3:a:siemens:tecnomatix_plant_simulation:2302.0006
-
cpe:2.3:a:siemens:tecnomatix_plant_simulation:2302.0007
-
cpe:2.3:a:siemens:tecnomatix_plant_simulation:2302.0016
-
cpe:2.3:a:siemens:tecnomatix_plant_simulation:2302.0018
-
cpe:2.3:a:siemens:tecnomatix_plant_simulation:2404.0
-
cpe:2.3:a:siemens:tecnomatix_plant_simulation:2404.0005
-
cpe:2.3:a:siemens:tecnomatix_plant_simulation:2404.0007