CVE-2023-28830

No fix known EPSS <1%CVSS 7.8

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions < V13.3.0.11), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted ASM file. An attacker could leverage this vulnerability to execute code in the context of the current process.

Published 2023-08-08 · CVE record · OSV

Products: Siemens JT2Go, Siemens Solid Edge SE2022, Siemens Solid Edge SE2023, Siemens Teamcenter Visualization V13.2, Siemens Teamcenter Visualization V13.3, Siemens Teamcenter Visualization V14.1, Siemens Teamcenter Visualization V14.2