Skip to content
OpenAdvisories
High SSA-722010 1 CVE

SSA-722010: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Published Jul 9, 2024 · Updated Aug 13, 2024 · Revision 2

Vendor: Siemens Product: JT2Go Product: Teamcenter Visualization V14.1 Product: Teamcenter Visualization V14.2 Product: Teamcenter Visualization V14.3 Product: Teamcenter Visualization V2312

Summary

Siemens Teamcenter Visualization and JT2Go are affected by an out of bounds read vulnerability in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

  • High 7.8
    CVE-2023-7066

    Siemens Teamcenter Visualization and JT2Go Out-of-bounds Read

    The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

    Siemens JT2Go Teamcenter Visualization ICS / OT

Revision history

  1. #2

    Adding Nafiez to acknowledgement; updated link to Datalogics APDFL release notes

  2. #1

    Publication Date

References