CVE-2023-30795
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Aug 8, 2023
Updated: Aug 11, 2023
CWE ID 125
Summary
CVE-2023-30795 is a newly disclosed vulnerability affecting various versions of JT Open, JT Utilities, Parasolid V34.0, Parasolid V34.1, Parasolid V35.0, and Parasolid V35.1. These applications contain an out-of-bounds read vulnerability during the parsing of specially crafted JT files. An attacker can exploit this flaw to read memory beyond the allocated structure, potentially leading to code execution in the context of the current process. It is recommended that users upgrade to the affected applications' latest versions to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Siemens Parasolid
Affected Vendors
- Siemens AG