SSA-278349: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Siemens JT2Go and Teamcenter Visualization are affected by file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-38076US | — | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),… | ||||
| CVE-2023-38075US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),… | ||||
| CVE-2023-38074US | — | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),… | ||||
| CVE-2023-38073US | — | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),… | ||||
| CVE-2023-38072US | — | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),… | ||||
| CVE-2023-38071US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),… | ||||
| CVE-2023-38070US | — | — | ||
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions),… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-278349: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - CSAF Versionself
- SSA-278349: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - HTML Versionself
- SSA-278349: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - PDF Versionself
- SSA-278349: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - TXT Versionself
Behebungen (42)
- Kein Fix geplantTeamcenter Visualization V14.0
Currently no fix is planned
- Kein Fix geplantTeamcenter Visualization V14.0
Currently no fix is planned
- Kein Fix geplantTeamcenter Visualization V14.0
Currently no fix is planned
- Kein Fix geplantTeamcenter Visualization V14.0
Currently no fix is planned
- Kein Fix geplantTeamcenter Visualization V14.0
Currently no fix is planned
- Kein Fix geplantTeamcenter Visualization V14.0
Currently no fix is planned
- Kein Fix geplantTeamcenter Visualization V14.0
Currently no fix is planned
- BehobenJT2Go
Update to V14.3.0.1 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.3.0.1 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.3.0.1 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.3.0.1 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.3.0.1 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.3.0.1 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.3.0.1 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.12 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.12 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.12 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.12 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.12 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.12 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.12 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.11 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.11 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.11 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.11 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.11 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.11 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.11 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.6 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.6 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.6 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.6 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.6 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.6 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.2
Update to V14.2.0.6 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.3
Update to V14.3.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.3
Update to V14.3.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.3
Update to V14.3.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.3
Update to V14.3.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.3
Update to V14.3.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.3
Update to V14.3.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.3
Update to V14.3.0.1 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan