Open Design Alliance Drawings SDK
JT2Go and Teamcenter Visualization are affected by multiple file parsing vulnerabilities in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions. Note: - This advisory covers security vulnerabilities recently disclosed by Open Design Alliance [0] [0] https://www.opendesign.com/security- advisories
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-28809US | high7.8OT elevated | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading a DWG file with an invalid vertex number in a re… | ||||
| CVE-2022-28808US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading DWG files in a recovery mode. An attacker can le… | ||||
| CVE-2022-28807US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists when rendering a .dwg file after it's opened in the recovery… | ||||
references
External citations — patches, advisories, analysis.
- SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization - CSAF Versionself
- SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization - PDF Versionself
- SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization - TXT Versionself
- ICS Advisory ICSA-22-195-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-195-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (30)
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V12.4
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V12.4
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V12.4
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- FixedJT2Go
Update to V13.3.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedJT2Go
Update to V13.3.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedJT2Go
Update to V13.3.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedTeamcenter Visualization V12.4
Update to V12.4.0.15 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V12.4
Update to V12.4.0.15 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V12.4
Update to V12.4.0.15 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.3
Update to V13.3.0.5 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.3
Update to V13.3.0.5 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.3
Update to V13.3.0.5 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan