CVE-2023-33124
Full vulnerability record from the local CVENow database.
Description
A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a memory corruption vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2023-06-13 09:15:18.500000
Last modified
2026-10-23 23:10:00.157000
View original CVE JSON
{
"id": "CVE-2023-33124",
"sourceIdentifier": "[email protected]",
"published": "2023-06-13T09:15:18.500",
"lastModified": "2026-10-23T23:10:00.157",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a memory corruption vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en JT2Go (todas las versiones anteriores a V14.2.0.3), Teamcenter Visualization V13.2 (todas las versiones anteriores a V13.2.0.13), Teamcenter Visualization V13.3 (todas las versiones anteriores a V13.3.0.10), Teamcenter Visualization V14.0 (todas las versiones anteriores a V14.0.0.6), Teamcenter Visualization V14.1 (todas las versiones anteriores a V14.1.0.8), Teamcenter Visualization V14.2 (todas las versiones anteriores a V14.2.0.3). Las aplicaciones afectadas contienen una vulnerabilidad de corrupción de memoria al analizar archivos CGM especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Siemens",
"product": "JT2Go",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V14.2.0.3",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V13.2",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V13.2.0.13",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V13.3",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V13.3.0.10",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V14.0",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V14.0.0.6",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V14.1",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V14.1.0.8",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V14.2",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V14.2.0.3",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-01-03T01:36:55.445166Z",
"id": "CVE-2023-33124",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.2.0.3",
"matchCriteriaId": "64B11DAF-8FFB-4696-85E5-67853B8A91F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.2.0",
"versionEndExcluding": "13.2.0.13",
"matchCriteriaId": "FC06105E-8D31-4AFD-88C6-2E58D01CFFE8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.3.0",
"versionEndExcluding": "13.3.0.10",
"matchCriteriaId": "CAC2B735-3298-4B79-B98F-21916EE7926F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionStartIncluding": "14.0",
"versionEndExcluding": "14.0.0.6",
"matchCriteriaId": "63AC2AB5-3593-4922-A4CC-E5E0E35DE071"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionStartIncluding": "14.1",
"versionEndExcluding": "14.1.0.8",
"matchCriteriaId": "F7D64A7C-AF27-4E09-9455-98BBF231CAF5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"versionStartIncluding": "14.2",
"versionEndExcluding": "14.2.0.3",
"matchCriteriaId": "A5D5D267-7DE4-4116-878D-4422D9B5E7FD"
}
]
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf",
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}