CISA 2026-05-14

Siemens Teamcenter

Machine-generated analysis · WAYSCloud LLM

Teamcenter V2312 and V2406 incorporate a vulnerable PDF.js component (CVE-2024-4367) from Firefox/Thunderbird. Multiple versions across the product line are affected by three distinct CVEs.

Context

Siemens Teamcenter is a product lifecycle management software. The advisory states that vulnerabilities could lead to compromise of availability, integrity, and confidentiality. The affected versions span multiple release trains, with V2312 and V2406 specifically noted to include a vulnerable third-party PDF.js library.

Operator considerations

Check: Inventory deployments of Teamcenter V2312, V2406, V2412, and V2506 for affected versions.
Patch: Update V2312 to version 2312.0009 or later.
Patch: Update V2406 to version 2406.0006 or later.
Patch: Update V2412 to version 2412.0009 or later.
Patch: Update V2506 to version 2506.0005 or later.

From Cybersecurity and Infrastructure Security Agency ↗

Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the affected products and recommends to update to the latest versions.

The following versions of Siemens Teamcenter are affected:

Teamcenter V2312 vers:intdot/

Read the full advisory on CISA →