CVE-2023-38529

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 8, 2023
Updated: Aug 13, 2024
CWE ID 125

Summary

CVE-2023-38529 is a newly identified vulnerability affecting various versions of Parasolid V34.1, V35.0, V35.1, Teamcenter Visualization V14.1, V14.2, V14.3, and Teamcenter Visualization V2312. The issue lies in an out-of-bounds read issue while processing specially crafted X_T files. An attacker can exploit this vulnerability to execute code in the context of the current process. Parasolid and Teamcenter Visualization users are recommended to update their software to the latest patched versions as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Siemens Parasolid
  • Siemens Teamcenter Visualization

Affected Vendors

  • Siemens AG