← Back

CVE-2023-30795

nvd nist
Published: Aug 8, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < V34.0.253), Parasolid V34.1 (All versions < V34.1.243), Parasolid V35.0 (All versions < V35.0.177), Parasolid V35.1 (All versions < V35.1.073). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

Affected (6)

Siemens
3 products
Jt Open
Jt Utilities
Parasolid
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Jt Open
Before 11.4
Jt Utilities
Before 13.4
Siemens
Parasolid
From 34.0 to 34.0.253
Parasolid
From 34.1 to 34.1.243
Parasolid
From 35.0 to 35.0.177
Parasolid
From 35.1 to 35.1.073

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

Source: productcert@siemens.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.