2023-08-08 12:00:32 +00:00
{
"id" : "CVE-2023-28830" ,
"sourceIdentifier" : "productcert@siemens.com" ,
"published" : "2023-08-08T10:15:14.847" ,
2023-08-15 18:00:37 +00:00
"lastModified" : "2023-08-15T16:54:21.120" ,
"vulnStatus" : "Analyzed" ,
2023-08-08 12:00:32 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions < V13.3.0.11), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted ASM file. An attacker could leverage this vulnerability to execute code in the context of the current process."
}
] ,
"metrics" : {
"cvssMetricV31" : [
2023-08-15 18:00:37 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
} ,
2023-08-08 12:00:32 +00:00
{
"source" : "productcert@siemens.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
2023-08-15 18:00:37 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-416"
}
]
} ,
2023-08-08 12:00:32 +00:00
{
"source" : "productcert@siemens.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-416"
}
]
}
] ,
2023-08-15 18:00:37 +00:00
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "14.2.0.5" ,
"matchCriteriaId" : "52B9AF54-6EAC-4333-932B-7DD2F00CEDCE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.2.0" ,
"versionEndExcluding" : "13.2.0.15" ,
"matchCriteriaId" : "B51820E2-ED58-4CF9-9141-9875185E5034"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "13.3.0" ,
"versionEndExcluding" : "13.3.0.11" ,
"matchCriteriaId" : "677E517E-AF71-4D17-8200-F46545800581"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.1" ,
"versionEndExcluding" : "14.1.0.11" ,
"matchCriteriaId" : "9EF3388B-D057-4DB9-96AE-B6F4678FE5B8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "14.2" ,
"versionEndExcluding" : "14.2.0.5" ,
"matchCriteriaId" : "B2FB1524-FFB8-4190-A221-248509EC6756"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "22C0D3BE-0640-49C8-86F1-52966CABA2E2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DE12CBDF-222E-4DE9-927A-3BDDBFFF1E1A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EEFAAAE5-52B1-48EA-98E1-98A854CBE65A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D5AFCFBB-ED56-4DDB-89D8-B47A20821AB8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "087A9E78-9E5C-4D94-A251-02F9AB160F54"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "68EE0588-FE7F-4581-9484-52404DB5B99A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F72318F-0E9C-4AB1-9CA2-6527513AE0F6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "63C93992-17F7-4499-BC57-BD67E8A6C508"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7180CEA7-150A-4B1D-BDFD-61C320A33148"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B0244EE5-BF22-491A-A7DE-48F44E2A17FC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3A583AAD-5B13-4822-AA24-AA7D16305FE2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_12:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "543549E2-CD73-48ED-8BB3-2BAC721A850C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "60B92DC2-5A0D-4F6E-81FD-3A0CA25B0D32"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:update_0001:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E10B6B37-8C69-47B6-A4B8-DDBA562F083E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:update_0002:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FB3FFA6A-3A27-4F38-9A4B-E869880A1861"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:update_0003:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C35655ED-9061-4674-9321-1485AABBCE06"
}
]
}
]
}
] ,
2023-08-08 12:00:32 +00:00
"references" : [
{
"url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf" ,
2023-08-15 18:00:37 +00:00
"source" : "productcert@siemens.com" ,
"tags" : [
"Vendor Advisory"
]
2023-08-08 12:00:32 +00:00
}
]
}
