Out of Bounds Read Vulnerability in Teamcenter Visualization

An attacker could trick an engineer or designer into opening a malicious 3D model file (.WRL format), causing Teamcenter Visualization to crash or potentially execute arbitrary code on the engineering workstation with that user's privileges.

Engineering and design teams at utilities and industrial facilities who use Siemens Teamcenter Visualization for 3D plant models, asset design, and process documentation. This affects workstations, not operational equipment directly, but compromised design workstations could be used to modify or exfiltrate critical infrastructure designs.

An attacker crafts a malicious WRL (VRML 3D model) file with out-of-bounds data and sends it to an engineer via email or file sharing. When the engineer opens the file in Teamcenter Visualization, the application attempts to parse the malformed file, reads memory beyond the expected bounds, and either crashes or allows code execution. This targets design and engineering personnel rather than operational systems directly.