CVE-2023-28830: Use After Free
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions < V13.3.0.11), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted ASM file. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28830?
The severity of CVE-2023-28830 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2023-28830?
CVE-2023-28830 affects JT2Go (versions < V14.2.0.5), Solid Edge SE2022 (versions < V222.0 Update 13), Solid Edge SE2023 (versions < V223.0 Update 4), Teamcenter Visualization V13.2 (versions < V13.2.0.15), Teamcenter Visualization V13.3 (versions < V13.3.0.11), and more.
How can I fix CVE-2023-28830?
To mitigate CVE-2023-28830, it is recommended to update JT2Go to V14.2.0.5 or higher, Solid Edge SE2022 to V222.0 Update 13 or higher, Solid Edge SE2023 to V223.0 Update 4 or higher, and Teamcenter Visualization to V13.2.0.15 or higher.
What is CWE-416?
CWE-416 is a vulnerability that occurs when relying on a location that is not memory controllable.
Where can I find more information about CVE-2023-28830?
More information about CVE-2023-28830 can be found at the following link: [https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf](https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf)