CVE-2023-28830
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions <…
Impact
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions < V13.3.0.11), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted ASM file. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Jt2go | before 14.2.0.5 |
| Siemens | Teamcenter Visualization | from 13.2.0 before 13.2.0.15 from 13.3.0 before 13.3.0.11 from 14.1 before 14.1.0.11 from 14.2 before 14.2.0.5 |
| Siemens | Solid Edge Se2022 | All versions Versions maintenance_pack_1, maintenance_pack_2, maintenance_pack_3, maintenance_pack_4, maintenance_pack_5 |
| Siemens | Solid Edge Se2023 | All versions Versions update_0001, update_0002, update_0003 |