A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1), Tecnomatix Plant Simulation V2201 (All versions < V2201.0010), Tecnomatix Plant Simulation V2302 (All versions < V2302.0004). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20825)
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-278349.pdf | Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-478780.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Feb 2024, 15:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-478780.pdf - Vendor Advisory | |
| First Time |
Siemens tecnomatix Plant Simulation
|
|
| CPE | cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:* |
14 Nov 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1), Tecnomatix Plant Simulation V2201 (All versions < V2201.0010), Tecnomatix Plant Simulation V2302 (All versions < V2302.0004). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20825) |
14 Sep 2023, 16:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-278349.pdf - Vendor Advisory | |
| CPE | cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:* |
|
| First Time |
Siemens jt2go
Siemens Siemens teamcenter Visualization |
12 Sep 2023, 11:51
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-12 10:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-38072
Mitre link : CVE-2023-38072
CVE.ORG link : CVE-2023-38072
JSON object : View
Products Affected
siemens
- teamcenter_visualization
- tecnomatix_plant_simulation
- jt2go
CWE
CWE-787
Out-of-bounds Write