Siemens Solid Edge, JT2Go, and Teamcenter Visualization

🗓️ 08 Aug 2023 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 64 Views

Siemens product vulnerabilities affect Solid Edge, JT2Go, and Teamcenter Visualization. Use After Free, Out-of-bounds Read, and Out-of-bounds Write vulnerabilities. CISA will no longer update ICS security advisories for Siemens products after January 10, 2023

Reporter	Title	Published	Views	Family All 34
BDU FSTEC	The vulnerabilities of the 3D viewing tool JTJT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the design and simulation tools of Siemens Solid Edge allow attackers to execute arbitrary code.	21 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 3D viewing tool JT JT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the design and simulation tools set by Siemens Solid Edge allows a malicious actor to execute arbitrary code within the context of the current process.	31 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 3D viewing tool JT JT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the design tool suite lies in the ability to write code outside the buffer memory, allowing attackers to execute arbitrary code.	5 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-28830	8 Aug 202314:14	–	circl
CNNVD	Siemens 多款产品缓冲区错误漏洞	8 Aug 202300:00	–	cnnvd
CNNVD	Siemens Parasolid 缓冲区错误漏洞	8 Aug 202300:00	–	cnnvd
CNNVD	Siemens 多款产品资源管理错误漏洞	8 Aug 202300:00	–	cnnvd
CNVD	Siemens JT2Go and Teamcenter Out-of-Bounds Write Vulnerability	9 Aug 202300:00	–	cnvd
CNVD	Siemens JT2Go and Teamcenter Out-of-Bounds Read Vulnerability	9 Aug 202300:00	–	cnvd
CNVD	Siemens Solid Edge, JT2Go and Teamcenter Free After Use Vulnerability	9 Aug 202300:00	–	cnvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-131450.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-131450.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-131450.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-222-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-222-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

08 Aug 2023 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.8

EPSS0.00119

SSVC