Siemens Solid Edge, JT2Go, and Teamcenter Visualization
Siemens JT2Go, Teamcenter Visualization and Solid Edge are affected by multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as ASM or TIFF file format) with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-38683US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions <… | ||||
| CVE-2023-38682US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions <… | ||||
| CVE-2023-28830US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Te… | ||||
references
External citations — patches, advisories, analysis.
- SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - CSAF Versionself
- SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - HTML Versionself
- SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - PDF Versionself
- SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - TXT Versionself
- ICS Advisory ICSA-23-222-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-222-01 - Web Versionself
- Recommended Practicesexternal
remediations (30)
- MitigationJT2Go
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationJT2Go
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationJT2Go
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationSolid Edge SE2022
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.1
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.1
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.1
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- FixedJT2Go
Update to V14.2.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedJT2Go
Update to V14.2.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedJT2Go
Update to V14.2.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedSolid Edge SE2022
Update to V222.0 Update 13 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 4 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.14 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.14 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.15 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.3
Update to V13.3.0.11 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V14.1
Update to V14.1.0.10 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V14.1
Update to V14.1.0.10 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V14.1
Update to V14.1.0.11 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V14.2
Update to V14.2.0.5 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V14.2
Update to V14.2.0.5 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V14.2
Update to V14.2.0.5 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan