Skip to content
OpenAdvisories
High SSA-407785 9 CVEs

SSA-407785: Multiple X_T File Parsing Vulnerabilities in Parasolid and Teamcenter Visualization

Published Aug 8, 2023 · Updated Aug 13, 2024 · Revision 4

Vendor: Siemens Product: Parasolid V34.1 Product: Parasolid V35.0 Product: Parasolid V35.1 Product: Teamcenter Visualization V14.1 Product: Teamcenter Visualization V14.2 Product: Teamcenter Visualization V14.3 Product: Teamcenter Visualization V2312

Summary

Parasolid and Teamcenter Visualization are affected by memory corruption vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution or denial of service in the context of the current process.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 9

Revision history

  1. #4

    Added fix version for Teamcenter Visualization V14.2 for CVE-2023-38527, CVE-2023-38529, CVE-2023-38531

  2. #3

    Corrected error regarding fix information for CVE-2023-38527, CVE-2023-38529 and CVE-2023-38531 for Teamcenter Visualization V14.1, Teamcenter Visualization V14.2 and Teamcenter Visualization V14.3 and added Teamcenter Visualization V2312. Corrected CVSSv3.1 vector of CVE-2023-38532. Added CVSSv4.0 vector to all CVEs

  3. #2

    Added fixes for Teamcenter Visualization V14.1 and Teamcenter Visualization V14.3

  4. #1

    Publication Date

References