CVE-2023-7066

HIGH

Siemens JT2Go and Teamcenter Visualization - Out-of-Bounds Read

Title source: llm

Description

The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

References (2)

Core 2

Core References

Third Party Advisory, US Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-03

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-722010.html

Scores

CVSS v3 7.8

EPSS 0.0024

EPSS Percentile 46.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-125

Status published

Products (5)

Siemens/JT2Go < V14.3.0.8

Siemens/Teamcenter Visualization < V14.1.0.14

Siemens/Teamcenter Visualization < V14.2.0.10

Siemens/Teamcenter Visualization < V14.3.0.8

Siemens/Teamcenter Visualization < V2312.0002

Published Aug 12, 2024

Tracked Since Feb 18, 2026