Summary
JT2Go and Teamcenter Visualization are affected by multiple file
parsing vulnerabilities in Drawings SDK from Open Design Alliance. If
a user is tricked to open a malicious DWG file with any of the
affected products, this could lead the application to crash or
potentially lead to arbitrary code execution. Siemens has released
updates for the affected products and recommends to update to the
latest versions. Note: - This advisory covers security
vulnerabilities recently disclosed by Open Design Alliance [0] [0]
https://www.opendesign.com/security-
advisories
Vulnerabilities 3
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists …
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists …
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists …
Revision history
-
#3
Added fix for Teamcenter Visualization version line V12.4
-
#2
Added fix for Teamcenter Visualization version lines V13.2 and V14.0
-
#1
Publication Date
References
-
SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-429204.pdf
-
SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-429204.txt