PT-2025-10735

CVE-2025-25266

·

Published

2025-03-11

·

Updated

2025-03-11

Description by

CVSS 3.1
6.8
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Name of the Vulnerable Software and Affected Versions Tecnomatix Plant Simulation V2302 versions prior to V2302.0021 Tecnomatix Plant Simulation V2404 versions prior to V2404.0010
Description The affected application does not properly restrict access to the file deletion functionality, which could allow an unauthorized attacker to delete files even when access to the system should be prohibited, resulting in potential data loss or unauthorized modification of system files.
Recommendations For Tecnomatix Plant Simulation V2302 versions prior to V2302.0021, update to version V2302.0021 or later to resolve the issue. For Tecnomatix Plant Simulation V2404 versions prior to V2404.0010, update to version V2404.0010 or later to resolve the issue. As a temporary workaround, consider restricting access to the file deletion functionality to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾