CVE-2023-33121
Full vulnerability record from the local CVENow database.
Description
A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2023-06-13 09:15:18.323000
Last modified
2026-10-24 13:10:00.147000
View original CVE JSON
{
"id": "CVE-2023-33121",
"sourceIdentifier": "[email protected]",
"published": "2023-06-13T09:15:18.323",
"lastModified": "2026-10-24T13:10:00.147",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en JT2Go (todas las versiones anteriores a V14.2.0.3), Teamcenter Visualization V13.2 (todas las versiones anteriores a V13.2.0.13), Teamcenter Visualization V13.3 (todas las versiones anteriores a V13.3.0.10), Teamcenter Visualization V14.0 (todas las versiones anteriores a V14.0.0.6), Teamcenter Visualization V14.1 (todas las versiones anteriores a V14.1.0.8), Teamcenter Visualization V14.2 (todas las versiones anteriores a V14.2.0.3). Las aplicaciones afectadas contienen una vulnerabilidad de desreferencia de puntero nulo al analizar archivos CGM especialmente diseñados. Un atacante podría aprovechar esta vulnerabilidad para bloquear la aplicación, provocando una condición de denegación de servicio."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Siemens",
"product": "JT2Go",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V14.2.0.3",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V13.2",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V13.2.0.13",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V13.3",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V13.3.0.10",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V14.0",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V14.0.0.6",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V14.1",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V14.1.0.8",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V14.2",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V14.2.0.3",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-01-03T01:41:54.698537Z",
"id": "CVE-2023-33121",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.2.0.3",
"matchCriteriaId": "64B11DAF-8FFB-4696-85E5-67853B8A91F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.2.0.13",
"matchCriteriaId": "29CAB414-2971-4974-9F19-1809F33B9715"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.3.0",
"versionEndExcluding": "13.3.0.10",
"matchCriteriaId": "CAC2B735-3298-4B79-B98F-21916EE7926F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionStartIncluding": "14.0",
"versionEndExcluding": "14.0.0.6",
"matchCriteriaId": "63AC2AB5-3593-4922-A4CC-E5E0E35DE071"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionStartIncluding": "14.1",
"versionEndExcluding": "14.1.0.8",
"matchCriteriaId": "F7D64A7C-AF27-4E09-9455-98BBF231CAF5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionStartIncluding": "14.2",
"versionEndExcluding": "14.2.0.3",
"matchCriteriaId": "A5D5D267-7DE4-4116-878D-4422D9B5E7FD"
}
]
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf",
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}