SSA-407785

csafDEsiemens_psirt

SSA-407785: Multiple X_T File Parsing Vulnerabilities in Parasolid and Teamcenter Visualization

view advisory published 2023-08-08

Parasolid and Teamcenter Visualization are affected by memory corruption vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution or denial of service in the context of the current process. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (9)

Related CVEs.

IDseverity exploitable
CVE-2023-38532USmedium5.5—
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcente…
CVE-2023-38531UShigh7.8—
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.184), Teamcente…
CVE-2023-38530UShigh7.8—
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcente…
CVE-2023-38529UShigh7.8—
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.184), Teamcente…
CVE-2023-38528UShigh7.8—
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.197), Parasolid…
CVE-2023-38527UShigh7.8—
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Teamcenter Visualization V14.1 (All versions), Teamce…
CVE-2023-38526UShigh7.8—
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcente…
CVE-2023-38525UShigh7.8—
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcente…
CVE-2023-38524UShigh7.8—
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcente…
02

references

External citations — patches, advisories, analysis.

03

remediations (112)

  • MitigationParasolid V34.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V34.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V34.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V34.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V34.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V34.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V34.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V34.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V34.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.0

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.0

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.0

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.0

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.0

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.0

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.0

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.0

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.0

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationParasolid V35.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.1

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.2

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.2

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.2

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.2

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.2

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.2

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.2

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.2

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.2

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.3

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.3

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.3

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.3

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.3

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.3

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.3

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.3

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V14.3

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V2312

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V2312

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • MitigationTeamcenter Visualization V2312

    Do not open untrusted XT files in Parasolid or Teamcenter Visualization

  • No fix plannedTeamcenter Visualization V14.1

    Currently no fix is planned

  • No fix plannedTeamcenter Visualization V14.1

    Currently no fix is planned

  • No fix plannedTeamcenter Visualization V14.1

    Currently no fix is planned

  • FixedParasolid V34.1

    Update to V34.1.258 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V34.1

    Update to V34.1.258 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V34.1

    Update to V34.1.258 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V34.1

    Update to V34.1.258 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V34.1

    Update to V34.1.258 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V34.1

    Update to V34.1.258 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V34.1

    Update to V34.1.258 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V34.1

    Update to V34.1.258 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V34.1

    Update to V34.1.258 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.0

    Update to V35.0.254 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.0

    Update to V35.0.254 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.0

    Update to V35.0.254 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.0

    Update to V35.0.254 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.0

    Update to V35.0.254 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.0

    Update to V35.0.254 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.0

    Update to V35.0.254 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.0

    Update to V35.0.254 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.0

    Update to V35.0.254 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.1

    Update to V35.1.171 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.1

    Update to V35.1.171 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.1

    Update to V35.1.171 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.1

    Update to V35.1.171 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.1

    Update to V35.1.171 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.1

    Update to V35.1.184 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.1

    Update to V35.1.184 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedParasolid V35.1

    Update to V35.1.184 or later version

    https://support.sw.siemens.com/product/258316782/
  • FixedTeamcenter Visualization V14.1

    Update to V14.1.0.11 or later version

  • FixedTeamcenter Visualization V14.1

    Update to V14.1.0.11 or later version

  • FixedTeamcenter Visualization V14.1

    Update to V14.1.0.11 or later version

  • FixedTeamcenter Visualization V14.1

    Update to V14.1.0.11 or later version

  • FixedTeamcenter Visualization V14.1

    Update to V14.1.0.11 or later version

  • FixedTeamcenter Visualization V14.1

    Update to V14.1.0.11 or later version

  • FixedTeamcenter Visualization V14.2

    Update to V14.2.0.12 or later version

  • FixedTeamcenter Visualization V14.2

    Update to V14.2.0.12 or later version

  • FixedTeamcenter Visualization V14.2

    Update to V14.2.0.12 or later version

  • FixedTeamcenter Visualization V14.2

    Update to V14.2.0.6 or later version

  • FixedTeamcenter Visualization V14.2

    Update to V14.2.0.6 or later version

  • FixedTeamcenter Visualization V14.2

    Update to V14.2.0.6 or later version

  • FixedTeamcenter Visualization V14.2

    Update to V14.2.0.6 or later version

  • FixedTeamcenter Visualization V14.2

    Update to V14.2.0.6 or later version

  • FixedTeamcenter Visualization V14.2

    Update to V14.2.0.6 or later version

  • FixedTeamcenter Visualization V14.3

    Update to V14.3.0.3 or later version

  • FixedTeamcenter Visualization V14.3

    Update to V14.3.0.3 or later version

  • FixedTeamcenter Visualization V14.3

    Update to V14.3.0.3 or later version

  • FixedTeamcenter Visualization V14.3

    Update to V14.3.0.3 or later version

  • FixedTeamcenter Visualization V14.3

    Update to V14.3.0.3 or later version

  • FixedTeamcenter Visualization V14.3

    Update to V14.3.0.3 or later version

  • FixedTeamcenter Visualization V14.3

    Update to V14.3.0.9 or later version

  • FixedTeamcenter Visualization V14.3

    Update to V14.3.0.9 or later version

  • FixedTeamcenter Visualization V14.3

    Update to V14.3.0.9 or later version

  • FixedTeamcenter Visualization V2312

    Update to V2312.0004 or later version

  • FixedTeamcenter Visualization V2312

    Update to V2312.0004 or later version

  • FixedTeamcenter Visualization V2312

    Update to V2312.0004 or later version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan