CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2023-51746
https://notcve.org/view.php?id=CVE-2023-51746
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.3.0.6). The affected applications contain a stack overflow vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.3.0.6), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0.13), Teamcenter Visualization V14.1 (Todas las versiones < V14.1.0.12), Teamcenter Visualization V14.2 (todas las versiones • https://cert-portal.siemens.com/productcert/pdf/ssa-794653.pdf • CWE-121: Stack-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2023-51745
https://notcve.org/view.php?id=CVE-2023-51745
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.3.0.6). The affected applications contain a stack overflow vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.3.0.6), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0.13), Teamcenter Visualization V14.1 (Todas las versiones < V14.1.0.12), Teamcenter Visualization V14.2 (todas las versiones • https://cert-portal.siemens.com/productcert/pdf/ssa-794653.pdf • CWE-121: Stack-based Buffer Overflow •
CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2023-51744
https://notcve.org/view.php?id=CVE-2023-51744
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.3.0.6). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.3.0.6), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0.13), Teamcenter Visualization V14.1 (Todas las versiones < V14.1.0.12), Teamcenter Visualization V14.2 (todas las versiones • https://cert-portal.siemens.com/productcert/pdf/ssa-794653.pdf • CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2023-51439
https://notcve.org/view.php?id=CVE-2023-51439
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.3.0.6). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.3.0.6), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0.13), Teamcenter Visualization V14.1 (Todas las versiones < V14.1.0.12), Teamcenter Visualization V14.2 (todas las versiones • https://cert-portal.siemens.com/productcert/pdf/ssa-794653.pdf • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0CVE-2023-38076 – Siemens Tecnomatix Plant Simulation WRL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-38076
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1), Tecnomatix Plant Simulation V2201 (All versions < V2201.0010), Tecnomatix Plant Simulation V2302 (All versions < V2302.0004). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21041) Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.3.0.1), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0.12), Teamcenter Visualization V14.0 (Todas las versiones), Teamcenter Visualization V14.1 ( Todas las versiones < V14.1.0.11), Teamcenter Visualization V14.2 (todas las versiones < V14.2.0.6), Teamcenter Visualization V14.3 (todas las versiones < V14.3.0.1). La aplicación afectada es vulnerable al Desbordamiento del Búfer mientras analiza archivos WRL especialmente manipulados. • https://cert-portal.siemens.com/productcert/pdf/ssa-278349.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-478780.pdf • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •