Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-38073

Published: 12/09/2023 Updated: 16/02/2024
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Siemens

Vulnerability Summary

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1), Tecnomatix Plant Simulation V2201 (All versions < V2201.0010), Tecnomatix Plant Simulation V2302 (All versions < V2302.0004). The affected application contains a type confusion vulnerability while parsing WRL files. This could allow an malicious user to execute code in the context of the current process. (ZDI-CAN-20826)

Vulnerable Product Search on Vulmon Subscribe to Product

siemens teamcenter visualization

siemens jt2go

siemens tecnomatix plant simulation

References

CWE-843https://cert-portal.siemens.com/productcert/pdf/ssa-278349.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-478780.pdfhttps://nvd.nist.govhttps://www.zerodayinitiative.com/advisories/ZDI-23-1629/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook