7.8

CVE-2023-7066

The affected applications contain an out of bounds read past the end of 
an allocated structure while parsing specially crafted PDF files. This 
could allow an attacker to execute code in the context of the current 
process.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Vendorsiemens
Product jt2go
Default Statusunknown
Version < 14.3.0.8
Version 0
Status affected
Vendorsiemens
Product teamcenter_visualization
Default Statusunknown
Version < 14.1.0.14
Version 0
Status affected
Version < 14.2.0.10
Version 0
Status affected
Version < 14.3.0.8
Version 0
Status affected
Version < 2312.0002
Version 0
Status affected
Vendorsiemens
Product teamcenter_visualization
Default Statusunknown
Version < 14.1.0.14
Version 0
Status affected
Version < 14.2.0.10
Version 0
Status affected
Version < 14.3.0.8
Version 0
Status affected
Version < 2312.0002
Version 0
Status affected
Vendorsiemens
Product teamcenter_visualization
Default Statusunknown
Version < 14.1.0.14
Version 0
Status affected
Version < 14.2.0.10
Version 0
Status affected
Version < 14.3.0.8
Version 0
Status affected
Version < 2312.0002
Version 0
Status affected
Vendorsiemens
Product teamcenter_visualization
Default Statusunknown
Version < 14.1.0.14
Version 0
Status affected
Version < 14.2.0.10
Version 0
Status affected
Version < 14.3.0.8
Version 0
Status affected
Version < 2312.0002
Version 0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.17% 0.392
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
ics-cert@hq.dhs.gov 7.3 0 0
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
ics-cert@hq.dhs.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.