SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization
Siemens JT2Go, Teamcenter Visualization and Solid Edge are affected by multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as ASM or TIFF file format) with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-38683US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions <… | ||||
| CVE-2023-38682US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions <… | ||||
| CVE-2023-28830US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Te… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - CSAF Versionself
- SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - HTML Versionself
- SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - PDF Versionself
- SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - TXT Versionself
Behebungen (30)
- MitigationJT2Go
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationJT2Go
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationJT2Go
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationSolid Edge SE2022
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.1
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.1
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.1
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- MitigationTeamcenter Visualization V14.2
Avoid to open untrusted files in JT2Go, Teamcenter Visualization and Solid Edge
- BehobenJT2Go
Update to V14.2.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.2.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.2.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenSolid Edge SE2022
Update to V222.0 Update 13 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 4 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.2
Update to V13.2.0.14 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.2
Update to V13.2.0.14 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.2
Update to V13.2.0.15 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.11 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.10 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.10 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.11 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.5 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.5 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.5 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan