Skip to main content

Required CVE Record Information

Description

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.2.0, 12.1.2.0, 13.0.2.0, 13.1.0.0, 13.1.1.0, 13.1.2.0, 13.1.3.0; FlexPLM: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.0.0, 12.0.2.0, 12.0.3.0, 12.1.2.0, 12.1.3.0, 13.0.2.0, 13.0.3.0.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
9.3CRITICAL4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/RE:M/U:Red

Product Status

Learn more

Versions 10 Total

Default Status: unknown

affected

  • affected at 11.0 M030 
  • affected at 11.1 M020 
  • affected at 11.2.1.0 
  • affected at 12.0.2.0 
  • affected at 12.1.2.0 
  • affected at 13.0.2.0 
  • affected at 13.1.0.0 
  • affected at 13.1.1.0 
  • affected at 13.1.2.0 
  • affected at 13.1.3.0 

Versions 10 Total

Default Status: unknown

affected

  • affected at 11.0 M030 
  • affected at 11.1 M020 
  • affected at 11.2.1.0 
  • affected at 12.0.0.0 
  • affected at 12.0.2.0 
  • affected at 12.0.3.0 
  • affected at 12.1.2.0 
  • affected at 12.1.3.0 
  • affected at 13.0.2.0 
  • affected at 13.0.3.0 

Authorized Data Publishers

Learn more