SSA-656895
Vulnerability from csaf_siemens - Published: 2025-02-11 00:00 - Updated: 2025-06-10 00:00Summary
SSA-656895: Open Redirect Vulnerability in Teamcenter
Notes
Summary: The SSO login service in Teamcenter contains an open redirect vulnerability that could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
7.4 (High)
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Teamcenter V14.1
Siemens / Teamcenter V14.1
|
vers:all/* |
Mitigation
Vendor Fix
|
|
|
Teamcenter V14.2
Siemens / Teamcenter V14.2
|
vers:all/* |
Mitigation
Vendor Fix
|
|
|
Teamcenter V14.3
Siemens / Teamcenter V14.3
|
vers:all/<V14.3.0.14 |
Mitigation
Vendor Fix
fix
|
|
|
Teamcenter V2312
Siemens / Teamcenter V2312
|
vers:all/<V2312.0010 |
Mitigation
Vendor Fix
fix
|
|
|
Teamcenter V2406
Siemens / Teamcenter V2406
|
vers:all/<V2406.0008 |
Mitigation
Vendor Fix
fix
|
|
|
Teamcenter V2412
Siemens / Teamcenter V2412
|
vers:all/<V2412.0004 |
Mitigation
Vendor Fix
fix
|
References
2 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The SSO login service in Teamcenter contains an open redirect vulnerability that could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data.\n\nSiemens has released new versions for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-656895: Open Redirect Vulnerability in Teamcenter - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-656895.html"
},
{
"category": "self",
"summary": "SSA-656895: Open Redirect Vulnerability in Teamcenter - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-656895.json"
}
],
"title": "SSA-656895: Open Redirect Vulnerability in Teamcenter",
"tracking": {
"current_release_date": "2025-06-10T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-656895",
"initial_release_date": "2025-02-11T00:00:00Z",
"revision_history": [
{
"date": "2025-02-11T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2025-02-25T00:00:00Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Removed fix version information as the implemented fix was insufficient - final fix being worked on for future release(s)"
},
{
"date": "2025-03-20T00:00:00Z",
"legacy_version": "1.2",
"number": "3",
"summary": "Added hot fixes for Teamcenter V14.1 through V2412"
},
{
"date": "2025-06-10T00:00:00Z",
"legacy_version": "1.3",
"number": "4",
"summary": "Added fix releases for Teamcenter V14.3 through V2412"
}
],
"status": "interim",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Teamcenter V14.1",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "Teamcenter V14.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Teamcenter V14.2",
"product_id": "2"
}
}
],
"category": "product_name",
"name": "Teamcenter V14.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV14.3.0.14",
"product": {
"name": "Teamcenter V14.3",
"product_id": "3"
}
}
],
"category": "product_name",
"name": "Teamcenter V14.3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV2312.0010",
"product": {
"name": "Teamcenter V2312",
"product_id": "4"
}
}
],
"category": "product_name",
"name": "Teamcenter V2312"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV2406.0008",
"product": {
"name": "Teamcenter V2406",
"product_id": "5"
}
}
],
"category": "product_name",
"name": "Teamcenter V2406"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV2412.0004",
"product": {
"name": "Teamcenter V2412",
"product_id": "6"
}
}
],
"category": "product_name",
"name": "Teamcenter V2412"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-23363",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The SSO login service of affected applications accepts user-controlled input that could specify a link to an external site. This could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not click on links from untrusted sources",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6"
]
},
{
"category": "vendor_fix",
"details": "Update to V14.3.0.14 or later version",
"product_ids": [
"3"
],
"url": "https://support.sw.siemens.com/product/282219420/"
},
{
"category": "vendor_fix",
"details": "Update to V2312.0010 or later version",
"product_ids": [
"4"
],
"url": "https://support.sw.siemens.com/product/282219420/"
},
{
"category": "vendor_fix",
"details": "Update to V2406.0008 or later version",
"product_ids": [
"5"
],
"url": "https://support.sw.siemens.com/product/282219420/"
},
{
"category": "vendor_fix",
"details": "Update to V2412.0004 or later version",
"product_ids": [
"6"
],
"url": "https://support.sw.siemens.com/product/282219420/"
},
{
"category": "vendor_fix",
"details": "Apply the hot fix as described in Software Field Bulletin PL8837639 (\nhttps://support.sw.siemens.com/en-US/product/282219420/knowledge-base/PL8837639)",
"product_ids": [
"1",
"2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6"
]
}
],
"title": "CVE-2025-23363"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…