Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIcscertCVE-2023-1709
HistoryJun 07, 2023 - 9:15 p.m.

CVE-2023-1709

2023-06-0721:15:12
CWE-787
CWE-121
icscert
web.nvd.nist.gov
31
20
cve-2023-1709
datalogics library
apdfl
stack-based buffer overflow
vulnerability
nvd
security issue

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

20.3%

JSON

Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process.

Affected configurations

Nvd
Node
siemensjt2goRange<14.2.0.2
OR
siemensteamcenter_visualizationRange13.2.0–13.2.0.13
OR
siemensteamcenter_visualizationRange13.3.0–13.3.0.9
OR
siemensteamcenter_visualizationRange14.0–14.0.0.5
OR
siemensteamcenter_visualizationRange14.1–14.1.0.7
OR
siemensteamcenter_visualizationRange14.2–14.2.0.2
VendorProductVersionCPE
siemensjt2go*cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*
siemensteamcenter_visualization*cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "JT2Go",
    "vendor": "Siemens ",
    "versions": [
      {
        "lessThan": "14.2.0.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Teamcenter Visualization",
    "vendor": "Siemens ",
    "versions": [
      {
        "lessThan": "13.2.0.13",
        "status": "affected",
        "version": "13.2",
        "versionType": "custom"
      },
      {
        "lessThan": "13.3.0.9",
        "status": "affected",
        "version": "13.3",
        "versionType": "custom"
      },
      {
        "lessThan": "14.0.0.5",
        "status": "affected",
        "version": "14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "14.1.0.7",
        "status": "affected",
        "version": "14.1",
        "versionType": "custom"
      },
      {
        "lessThan": "14.2.0.2",
        "status": "affected",
        "version": "14.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Library APDFL",
    "vendor": "Datalogics",
    "versions": [
      {
        "lessThanOrEqual": "v18.0.4PlusP1e",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Social References

More

Related

ics 2
prion 1
cvelist 1
nessus 1
nvd 1
ics
ics
Datalogics Library Third-Party
2023-06-13 12:00:00
Siemens Teamcenter Visualization and JT2Go
2023-04-13 12:00:00
prion
prion
Stack overflow
2023-06-07 21:15:00
cvelist
cvelist
CVE-2023-1709 Datalogics Library APDFL Stack-based Buffer Overflow
2023-06-07 20:36:05
nessus
nessus
Siemens JT2Go < 14.2.0.2 Code Execution (SSA-629917)
2023-04-20 00:00:00
nvd
nvd
CVE-2023-1709
2023-06-07 21:15:12

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

20.3%

JSON
Related for CVE-2023-1709
ics2prion1cvelist1nessus1nvd1