Stack-Based Buffer Overflow in JT2Go and Teamcenter Visualization by Siemens
CVE-2023-38070
7.8HIGH
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 12 September 2023
What is CVE-2023-38070?
A stack-based buffer overflow vulnerability has been detected in certain versions of JT2Go and Teamcenter Visualization from Siemens. The flaw occurs while processing specially crafted WRL files, which could allow an attacker to execute arbitrary code within the context of the affected application. Various versions are impacted, necessitating immediate attention and patches to mitigate potential exploitation.
Affected Version(s)
JT2Go All versions < V14.3.0.1
Teamcenter Visualization V13.3 All versions < V13.3.0.12
Teamcenter Visualization V14.0 All versions