CVE-2023-28830

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions < V13.3.0.11), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted ASM file. An attacker could leverage this vulnerability to execute code in the context of the current process.

• siemens jt2go (< 14.2.0.5) • siemens teamcenter visualization (>= 13.2.0 < 13.2.0.15) • siemens teamcenter visualization (>= 13.3.0 < 13.3.0.11) • siemens teamcenter visualization (>= 14.1 < 14.1.0.11) • siemens teamcenter visualization (>= 14.2 < 14.2.0.5) • siemens solid edge se2022 • siemens solid edge se2022 maintenance pack 1 • siemens solid edge se2022 maintenance pack 2 • siemens solid edge se2022 maintenance pack 3 • siemens solid edge se2022 maintenance pack 4 • siemens solid edge se2022 maintenance pack 5 • siemens solid edge se2022 maintenance pack 7 • siemens solid edge se2022 maintenance pack 8 • siemens solid edge se2022 maintenance pack 9 • siemens solid edge se2022 maintenance pack 10 • siemens solid edge se2022 maintenance pack 11 • siemens solid edge se2022 maintenance pack 12 • siemens solid edge se2023 • siemens solid edge se2023 update 0001 • siemens solid edge se2023 update 0002 • siemens solid edge se2023 update 0003