{"id":"CVE-2022-24290","aliases":["EUVD-2022-29192","GHSA-5cpx-m8gp-jj7j"],"status":"published","title":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.13), Teamcenter...","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.13), Teamcenter V13.0 (All versions \u003c V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2 (All versions \u003c V13.2.0.8), Teamcenter V13.3 (All versions \u003c V13.3.0.3), Teamcenter V14.0 (All versions \u003c V14.0.0.2). The tcserver.exe binary in affected applications is vulnerable to a stack overflow condition during the parsing of user input that may lead the binary to crash.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01268,"percentile":0.70015,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121","CWE-787"],"published":"2022-05-10T09:46:58Z","modified":"2026-06-17T04:31:33Z","products":[{"vendor":"siemens","product":"teamcenter"},{"vendor":"siemens","product":"teamcenter v12.4"},{"vendor":"siemens","product":"teamcenter v13.0"},{"vendor":"siemens","product":"teamcenter v13.1"},{"vendor":"siemens","product":"teamcenter v13.2"},{"vendor":"siemens","product":"teamcenter v13.3"},{"vendor":"siemens","product":"teamcenter v14.0"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-789162.pdf","tags":["x_refsource_MISC","x_transferred","Mitigation","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24290"},{"url":"https://github.com/advisories/GHSA-5cpx-m8gp-jj7j"}],"sources":{"cve":[{"id":"CVE-2022-24290","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.13), Teamcenter V13.0 (All versions \u003c V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2 (All versions \u003c V13.2.0.8), Teamcenter V13.3 (All versions \u003c V13.3.0.3), Teamcenter V14.0 (All versions \u003c V14.0.0.2). The tcserver.exe binary in affected applications is vulnerable to a stack overflow condition during the parsing of user input that may lead the binary to crash.","status":"published","published":"2022-05-10T09:46:58Z","modified":"2024-08-03T04:07:02.458Z","cwes":["CWE-121"],"updated_at":"2026-11-02T14:34:34.940806Z"}],"euvd":[{"id":"EUVD-2022-29192","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.13), Teamcenter V13.0 (All versions \u003c V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2 (All versions \u003c V13.2.0.8), Teamcenter V13.3 (All versions \u003c V13.3.0.3), Teamcenter V14.0 (All versions \u003c V14.0.0.2). The tcserver.exe binary in affected applications is vulnerable to a stack overflow condition during the parsing of user input that may lead the binary to crash.","status":"published","published":"2022-05-10T09:46:58Z","modified":"2024-08-03T04:07:02Z","updated_at":"2026-11-03T03:25:49.559039Z"}],"ghsa":[{"id":"GHSA-5cpx-m8gp-jj7j","title":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.13), Teamcenter...","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.13), Teamcenter V13.0 (All versions \u003c V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2 (All versions \u003c V13.2.0.8), Teamcenter V13.3 (All versions \u003c V13.3.0.3), Teamcenter V14.0 (All versions). The tcserver.exe binary in affected applications is vulnerable to a stack overflow condition during the parsing of user input that may lead the binary to crash.","status":"published","published":"2022-05-21T00:01:03Z","modified":"2023-01-29T05:02:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:45:08.540426Z"}],"nvd":[{"id":"CVE-2022-24290","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.13), Teamcenter V13.0 (All versions \u003c V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2 (All versions \u003c V13.2.0.8), Teamcenter V13.3 (All versions \u003c V13.3.0.3), Teamcenter V14.0 (All versions \u003c V14.0.0.2). The tcserver.exe binary in affected applications is vulnerable to a stack overflow condition during the parsing of user input that may lead the binary to crash.","status":"published","published":"2022-05-20T13:15:14.737Z","modified":"2026-06-17T04:31:33.303Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:07:20.264424Z"}]}}