Siemens Parasolid and Teamcenter Visualization

🗓️ 08 Aug 2023 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 25 Views

Siemens Parasolid and Teamcenter Visualization affected by NULL Pointer Dereference, Out-of-bounds Read, and Out-of-bounds Write vulnerabilitie

Reporter	Title	Published	Views	Family All 102
BDU FSTEC	The vulnerability of Parasolid’s 3D geometric modeling tool and Teamcenter Visualization’s product lifecycle management system lies in their ability to distribute resources indefinitely, allowing attackers to trigger service failures.	4 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Parasolid’s 3D geometric modeling tool and Teamcenter Visualization’s product lifecycle management system allows attackers to trigger service interruptions or perform remote code execution within the context of the current process.	11 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system allows a hacker to execute arbitrary code.	11 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system allows a hacker to execute arbitrary code.	22 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system allows a hacker to execute arbitrary code.	22 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system allows a hacker to execute arbitrary code.	22 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Parasolid’s 3D geometric modeling tool, along with the Teamcenter Visualization product lifecycle management system, relates to reading data beyond the buffer in memory. This vulnerability allows attackers to execute arbitrary code.	26 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Parasolid’s 3D geometric modeling tool, along with the Teamcenter Visualization product lifecycle management system, relates to reading beyond the buffer in memory. This allows a malicious actor to execute arbitrary code.	26 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Parasolid’s 3D geometric modeling tool and Teamcenter Visualization’s product lifecycle management system lies in the ability to read data beyond the buffer in memory, allowing attackers to execute arbitrary code.	3 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-38524	8 Aug 202314:15	–	circl

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-407785.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-407785.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-222-06.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-222-06
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

08 Aug 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.8

CVSS 47.3

EPSS0.00195

SSVC