Privilege escalation in Siemens Teamcenter V12.4
CVE-2021-40354
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The "surrogate" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the "inbox/surrogate tasks".
EPSS: 0.006 (44.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N.
Affected products
- Siemens Teamcenter V12.4 — versions All versions < V12.4.0.8
- Siemens Teamcenter V13.0 — versions All versions < V13.0.0.7
- Siemens Teamcenter V13.1 — versions All versions < V13.1.0.5
- Siemens Teamcenter V13.2 — versions All versions < 13.2.0.2
- Siemens Teamcenter_visualization
Weakness classification (CWE)
Public proof-of-concept exploits
References
- productcert@siemens.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-40354?
- CVE-2021-40354 is a high-severity vulnerability in Siemens Teamcenter V12.4, classified under Privilege Defined With Unsafe Actions. CVSS score: 7.1/10. Published 2021-09-14.
- How severe is CVE-2021-40354?
- High severity. CVSS v3 base score is 7.1 out of 10.
- Is CVE-2021-40354 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.