CVE-2023-28830: Use After Free

A vulnerability has been identified in JT2Go All versions V14.2.0.5, Solid Edge SE2022 All versions V222.0 Update 13, Solid Edge SE2023 All versions V223.0 Update 4, Teamcenter Visualization V13.2 All versions V13.2.0.15, Teamcenter Visualization V13.3 All versions V13.3.0.11, Teamcenter...

CVE-2023-39184: Out-of-bounds Read

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the curre...

CVE-2023-39187: Out-of-bounds Read

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the curre...

Siemens 多款产品 资源管理错误漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with available JT, VFZ, CGM, and TIF data.Solid Edge is a portfolio of software tools that address a variety of product development processes: 3D design, simulation, manufacturing, and design management.Teamcente...

PT-2023-4226 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 7 Description: A vulnerability has been identified in the affected application, which contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in Parasolid, Solid Edge, TeamCenter, SoftwareCenter, SIMATIC, SICAM and Ruggedcom products. The vulnerabilities potentially enable a malicious party to execute attacks that could result in the following categories of damage: Denial-of-Service DoS. Manipulation o...

PT-2023-27015 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 2 Description: A use-after-free issue has been identified in the affected application, which could be triggered while parsing specially crafted DWG files. This could allow an attacker to execu...

CVE-2023-39181: Out-of-bounds Write

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to execute code in the context of the curren...

PT-2023-4598

Name of the Vulnerable Software and Affected Versions JT2Go versions prior to 14.2.0.5 Teamcenter Visualization V13.2 versions prior to 13.2.0.14 Teamcenter Visualization V14.1 versions prior to 14.1.0.10 Teamcenter Visualization V14.2 versions prior to 14.2.0.5 Siemens Solid Edge affected versio...

PT-2023-4231 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 7 Description: A vulnerability has been identified that involves an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an...

CVE-2023-39185: Out-of-bounds Read

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the curre...

PT-2023-4227

Name of the Vulnerable Software and Affected Versions Solid Edge SE2023 versions prior to V223.0 Update 7 Description A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT...

CVE-2023-39183: Out-of-bounds Read

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the curre...

CVE-2023-39549: Use After Free

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 2. The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted DWG file. An attacker could leverage this vulnerability to execute code in the context of...

PT-2023-4233 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 7 Description: A vulnerability has been identified that allows an attacker to execute code in the context of the current process by exploiting an out of bounds read past the end of an allocate...

CVE-2023-39188: Out-of-bounds Read

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the curre...

PT-2023-4230

Name of the Vulnerable Software and Affected Versions Solid Edge SE2023 versions prior to V223.0 Update 7 Description The issue is related to an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the...

CVE-2023-39419: Out-of-bounds Write

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the...

PT-2023-4232 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 7 Description: A vulnerability has been identified that involves an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an...

Siemens Solid Edge Viewer DWG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...