Vulnerabilities > CVE-2023-28830 - Use After Free vulnerability in Siemens products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

siemens

CWE-416

NVD

Published: 2023-08-08

Updated: 2023-08-15

Summary

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions < V13.3.0.11), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted ASM file. An attacker could leverage this vulnerability to execute code in the context of the current process.

Vulnerable Configurations

Part	Description	Count
Application	Siemens Siemens Teamcenter Visualization 14.2 Siemens Teamcenter Visualization 14.2.0.3 Siemens Teamcenter Visualization 13.3.0 Siemens Teamcenter Visualization 13.3.0.1 Siemens Teamcenter Visualization 13.3.0.5 Siemens Teamcenter Visualization 13.3.0.8 Siemens Teamcenter Visualization 13.2.0 Siemens Teamcenter Visualization 13.2.0.1 Siemens Teamcenter Visualization 13.2.0.2 Siemens Teamcenter Visualization 13.2.0.12 Siemens Teamcenter Visualization 14.1 Siemens Teamcenter Visualization 14.1.0.5 Siemens Teamcenter Visualization 14.1.0.6 Siemens Jt2Go - Siemens Jt2Go 13.1.0 Siemens Jt2Go 13.1.0.1 Siemens Jt2Go 13.1.0.2 Siemens Jt2Go 13.1.0.3 Siemens Jt2Go 13.2.0 Siemens Jt2Go 13.2.0.1 Siemens Jt2Go 13.2.0.2 Siemens Jt2Go 13.3.0.5 Siemens Jt2Go 14.1.0.5 Siemens Solid Edge Se2022 Maintenance_Pack_7 Siemens Solid Edge Se2022 Maintenance_Pack_2 Siemens Solid Edge Se2022 Maintenance_Pack_8 Siemens Solid Edge Se2022 Maintenance_Pack_5 Siemens Solid Edge Se2022 Maintenance_Pack_3 Siemens Solid Edge Se2022 Maintenance_Pack_1 Siemens Solid Edge Se2022 Maintenance_Pack_4 Siemens Solid Edge Se2022 - Siemens Solid Edge Se2022 Maintenance_Pack_9 Siemens Solid Edge Se2022 Maintenance_Pack_10 Siemens Solid Edge Se2022 Maintenance_Pack_11 Siemens Solid Edge Se2022 Maintenance_Pack_12 Siemens Solid Edge Se2023 - Siemens Solid Edge Se2023 Update_0001 Siemens Solid Edge Se2023 Update_0002 Siemens Solid Edge Se2023 Update_0003	39

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf