CVE-2022-34661: siemens teamcenter Infinite Loop

Vulnerability summary

CVE-2022-34661 is a high (CVSS 7.5) Infinite Loop vulnerability in siemens teamcenter. EPSS estimates a 0.74% chance of exploitation in the next 30 days, higher than 53.5% of scored vulnerabilities.

Timeline

1. 10-08-2022
   PublishedVulnerability first disclosed.
2. 03-09-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter is vulnerable to denial of service by entering infinite loops and using up CPU cycles. This could allow an attacker to cause denial of service condition.

• CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.