Siemens has an update available to handle out-of-bounds read, NULL pointer dereference and stack-based buffer overflow vulnerabilities in its JT2Go and Teamcenter Visualization, according to a report with CISA.
Successful exploitation of these vulnerabilities, which Siemens self-reported, could allow an attacker to execute code in the context of the software’s current process or crash the application causing a denial of service.
The following Siemens products suffer from the vulnerabilities:
- JT2Go: All versions prior to V14.3.0.6
- Teamcenter Visualization V13.3: All versions prior to V13.3.0.13
- Teamcenter Visualization V14.1: All versions prior to V14.1.0.12
- Teamcenter Visualization V14.2: All versions prior to V14.2.0.9
- Teamcenter Visualization V14.3: All versions prior to V14.3.0.6
In one issue, the affected applications contain an out-of-bounds read past the end of an allocated structure while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-51439 is the case number for this vulnerability, which has a CVSS v3.1 base score of 7.8.
In addition, the affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVE-2023-51744 is the case number for this vulnerability, which has a CVSS v3.1 base score of 3.3.
Also, the affected applications contain a stack overflow vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-51745 is the case number for this vulnerability, which has a CVSS v3.1 base score of 7.8.
Meanwhile, the affected applications contain a stack overflow vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-51746 is the case number for this vulnerability, which has a CVSS v3.1 base score of 7.8.
The product sees use mainly in the critical manufacturing sector, and on a global basis.
No known public exploits target these vulnerabilities. These vulnerabilities are not exploitable remotely. However, an attacker could leverage these low complexity vulnerabilities.
Siemens recommends users update software to mitigate risk from these vulnerabilities.
- JT2Go: Update to V14.3.0.6 or later version
- Teamcenter Visualization V13.3: Update to V13.3.0.13 or later version
- Teamcenter Visualization V14.1: Update to V14.1.0.12 or later version
- Teamcenter Visualization V14.2: Update to V14.2.0.9 or later version
- Teamcenter Visualization V14.3: Update to V14.3.0.6 or later version
Siemens also recommends users avoid opening untrusted CGM files in JT2Go and Teamcenter Visualization.