CVE-2023-28830
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-28830 is a use-after-free vulnerability affecting multiple applications, including JT2Go versions prior to V14.2.0.5, Solid Edge SE2022, Solid Edge SE2023, Teamcenter Visualization V13.2, Teamcenter Visualization V13.3, Teamcenter Visualization V14.1, and Teamcenter Visualization V14.2. All these versions are vulnerable to this issue. An attacker can trigger the vulnerability by parsing specially crafted ASM files. Once triggered, the affected application may attempt to use a previously freed memory location, allowing an attacker to inject and execute malicious code within the application, potentially leading to a serious security breach.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Siemens JT2GO
- Siemens Teamcenter Visualization
- Teamcenter
Affected Vendors
- Siemens AG
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions