SSA-629917: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by a memory corruption vulnerability in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-1709US | high7.8 | — | ||
Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-629917: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go - CSAF Versionself
- SSA-629917: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go - HTML Versionself
- SSA-629917: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go - PDF Versionself
- SSA-629917: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go - TXT Versionself
Behebungen (12)
- MitigationJT2Go
Avoid to open untrusted files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.1
Avoid to open untrusted files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.2
Avoid to open untrusted files in JT2Go and Teamcenter Visualization
- BehobenJT2Go
Update to V14.2.0.2 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenTeamcenter Visualization V13.2
Update to V13.2.0.13 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.5 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.7 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.2 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan