Full Report
Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the affected products and recommends to update to the latest versions.
Analysis Summary
# Vulnerability: Multiple Vulnerabilities in Siemens Teamcenter (SSA-827383)
## CVE Details
- **CVE ID:** CVE-2026-33893
- **CVSS Score:** 8.7 (High) / 7.5 (High)
- **CWE:** CWE-798 (Use of Hard-coded Credentials)
- **CVE ID:** CVE-2026-33862
- **CVSS Score:** 8.5 (High) / 7.3 (High)
- **CWE:** CWE-79 (Cross-site Scripting)
- **CVE ID:** CVE-2024-4367
- **CVSS Score:** 5.6 (Medium)
- **CWE:** CWE-754 (Improper Check for Unusual or Exceptional Conditions)
## Affected Systems
- **Products:** Siemens Teamcenter (PLM System)
- **Versions:**
- **V2312:** All versions < V2312.0014 (All CVEs); < V2312.0009 (CVE-2024-4367)
- **V2406:** All versions < V2406.0012 (All CVEs); < V2406.0006 (CVE-2024-4367)
- **V2412:** All versions < V2412.0009 (CVE-2026-33862, CVE-2026-33893)
- **V2506:** All versions < V2506.0005 (CVE-2026-33862, CVE-2026-33893)
- **Configurations:** Systems utilizing PDF.js for font handling or web-based user interfaces for data entry.
## Vulnerability Description
This advisory addresses three distinct security flaws:
1. **Hardcoded Keys (CVE-2026-33893):** The application includes hardcoded keys used for obfuscation. An attacker can extract these keys to bypass security measures or gain unauthorized access.
2. **Cross-site Scripting (CVE-2026-33862):** Improper encoding/filtering of user-supplied data allows attackers to inject malicious scripts. These scripts execute in the context of other users viewing the affected pages.
3. **PDF.js Arbitrary JS Execution (CVE-2024-4367):** A missing type check in the PDF.js component during font handling allows for arbitrary JavaScript execution when processing malicious PDF files.
## Exploitation
- **Status:** Not exploited (Reported via coordinated disclosure by usd AG).
- **Complexity:** Low for CVE-2026-33893/33862; High for CVE-2024-4367.
- **Attack Vector:** Network.
- **User Interaction:** Required for XSS (CVE-2026-33862) and PDF execution (CVE-2024-4367). No interaction required for hardcoded key misuse.
## Impact
- **Confidentiality:** High (Unauthorized data access and information disclosure).
- **Integrity:** High (Potential for unauthorized modification via XSS).
- **Availability:** Low (Some impact in PDF.js context).
## Remediation
### Patches
Siemens recommends updating to the following versions or later:
- **Teamcenter V2312:** Update to V2312.0014
- **Teamcenter V2406:** Update to V2406.0012
- **Teamcenter V2412:** Update to V2412.0009
- **Teamcenter V2506:** Update to V2506.0005
### Workarounds
- No specific software workarounds provided.
- Follow **General Security Recommendations**: Restrict network access to Teamcenter instances and follow Siemens' operational guidelines for Industrial Security.
## Detection
- **Indicators of compromise:** Monitor for unusual administrative logins or unauthorized configuration changes. Audit web traffic for suspicious script patterns (XSS strings).
- **Detection methods:** Utilize web application firewalls (WAF) to detect XSS attempts. Check system logs for access originating from outside authorized subnets.
## References
- **Vendor Advisory:** hxxps://cert-portal.siemens.com/productcert/pdf/ssa-827383.pdf
- **Siemens Support:** hxxps://support.sw.siemens.com/product/282219420/
- **Industrial Security Guidelines:** hxxps://www.siemens.com/cert/operational-guidelines-industrial-security