Open Design Alliance Drawings SDK
JT2Go and Teamcenter Visualization are affected by multiple file parsing vulnerabilities in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions. Note: - This advisory covers security vulnerabilities recently disclosed by Open Design Alliance [0] [0] https://www.opendesign.com/security- advisories
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-28809US | high7.8OT erhöht | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading a DWG file with an invalid vertex number in a re… | ||||
| CVE-2022-28808US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading DWG files in a recovery mode. An attacker can le… | ||||
| CVE-2022-28807US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists when rendering a .dwg file after it's opened in the recovery… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization - CSAF Versionself
- SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization - PDF Versionself
- SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization - TXT Versionself
- ICS Advisory ICSA-22-195-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-195-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (30)
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V12.4
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V12.4
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V12.4
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- BehobenJT2Go
Update to V13.3.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V13.3.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V13.3.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenTeamcenter Visualization V12.4
Update to V12.4.0.15 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V12.4
Update to V12.4.0.15 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V12.4
Update to V12.4.0.15 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.2
Update to V13.2.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.2
Update to V13.2.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.2
Update to V13.2.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.5 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.5 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.5 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan