Lucene search

[email protected]CVE-2023-38530

HistoryAug 08, 2023 - 10:15 a.m.

CVE-2023-38530

2023-08-0810:15:16

CWE-125

[email protected]

web.nvd.nist.gov

cve

2023

38530

vulnerability

parasolid

teamcenter

out of bounds read

x_t files

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.3 High

CVSS4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

PASSIVE

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.2%

JSON

A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

Affected configurations

NVD

Node

siemensparasolidRange34.1–34.1.258

siemensparasolidRange35.0–35.0.254

siemensparasolidRange35.1–35.1.171

siemensteamcenter_visualizationRange14.1–14.1.0.11

siemensteamcenter_visualizationRange14.2–14.2.0.6

siemensteamcenter_visualizationRange14.3–14.3.0.3

CPENameOperatorVersion
siemens:parasolidsiemens parasolidlt34.1.258
siemens:parasolidsiemens parasolidlt35.0.254
siemens:parasolidsiemens parasolidlt35.1.171
siemens:teamcenter_visualizationsiemens teamcenter visualizationlt14.1.0.11
siemens:teamcenter_visualizationsiemens teamcenter visualizationlt14.2.0.6
siemens:teamcenter_visualizationsiemens teamcenter visualizationlt14.3.0.3

CPE	Name	Operator	Version
siemens:parasolid	siemens parasolid	lt	34.1.258
siemens:parasolid	siemens parasolid	lt	35.0.254
siemens:parasolid	siemens parasolid	lt	35.1.171
siemens:teamcenter_visualization	siemens teamcenter visualization	lt	14.1.0.11
siemens:teamcenter_visualization	siemens teamcenter visualization	lt	14.2.0.6
siemens:teamcenter_visualization	siemens teamcenter visualization	lt	14.3.0.3

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "Parasolid V34.1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V34.1.258",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Parasolid V35.0",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V35.0.254",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Parasolid V35.1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V35.1.171",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Teamcenter Visualization V14.1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V14.1.0.11",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Teamcenter Visualization V14.2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V14.2.0.6",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Teamcenter Visualization V14.3",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V14.3.0.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

cert-portal.siemens.com/productcert/html/ssa-407785.html

cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.3 High

CVSS4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

PASSIVE

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.2%

JSON

Related for CVE-2023-38530

nvd1 cvelist1 prion1 ics1