CVE-2023-38071

CWE-122 — Heap-based Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 78.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Siemens Jt2goSiemens Teamcenter VisualizationSiemens Tecnomatix Plant Simulation+7 more
Timeline
PublishedSep 12
Latest updateSep 14

Description

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1), Tecnomatix Plant Simulation V2201 (All versions < V2201.0010), Tecnomatix Plant Simulation V2302 (All versions < V2302.0004). The affected app…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages11 packages

▶NVDsiemens/teamcenter_visualization13.3.0 — 13.4.0.12+3
▶CVEListV5siemens/teamcenter_visualization_v13.3All versions < V13.3.0.12
▶CVEListV5siemens/teamcenter_visualization_v14.1All versions < V14.1.0.11
▶CVEListV5siemens/teamcenter_visualization_v14.2All versions < V14.2.0.6

🔴Vulnerability Details

2
GHSA
GHSA-729h-f868-g443: A vulnerability has been identified in JT2Go (All versions < V14↗2023-09-14
▶
CVEList
CVE-2023-38071: A vulnerability has been identified in JT2Go (All versions < V14↗2023-09-12
▶
CVE-2023-38071 (HIGH CVSS 7.8) | A vulnerability has been identified | cvebase.io