7.8

CVE-2023-33123

A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Jt2go Version < 14.2.0.3
Siemens ≫ Teamcenter Visualization Version >= 13.2.0 < 13.2.0.13
Siemens ≫ Teamcenter Visualization Version >= 13.3.0 < 13.3.0.10
Siemens ≫ Teamcenter Visualization Version >= 14.0 < 14.0.0.6
Siemens ≫ Teamcenter Visualization Version >= 14.1 < 14.1.0.8
Siemens ≫ Teamcenter Visualization Version >= 14.2 < 14.2.0.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.09% 0.268
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
productcert@siemens.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.