CVE-2026-33893
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-33893, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-05-12
Last updated on: 2026-05-18
Assigner: Siemens AG
Description
Description
A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.0005), Teamcenter V2512 (All versions). The affected application contains hardcoded key which is used for obfuscation stored directly into the application.
This could allow an attacker to obtain these keys and misuse them to gain unauthorized access.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| siemens | teamcenter | From 2312.0 (inc) to 2312.0014 (exc) |
| siemens | teamcenter | From 2406.0 (inc) to 2406.0012 (exc) |
| siemens | teamcenter | From 2412.0 (inc) to 2412.0009 (exc) |
| siemens | teamcenter | From 2506.0 (inc) to 2506.0005 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-798 | The product contains hard-coded credentials, such as a password or cryptographic key. |
