CVE-2023-29053: High severity Siemens Jt Open Toolkit vulnerability
A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JT Opento a version that resolves this vulnerability.Fixed in V11.3.2.0 - Upgrade
Upgrade
JT Utilitiesto a version that resolves this vulnerability.Fixed in V13.3.0.0
Event History
Frequently Asked Questions
What is CVE-2023-29053?
CVE-2023-29053 is a vulnerability in JT Open and JT Utilities that allows an attacker to execute arbitrary code.
What is the severity of CVE-2023-29053?
The severity of CVE-2023-29053 is high, with a severity value of 7.8.
Which software versions are affected by CVE-2023-29053?
CVE-2023-29053 affects JT Open versions older than V11.3.2.0 and JT Utilities versions older than V13.3.0.0.
How can an attacker exploit CVE-2023-29053?
An attacker can exploit CVE-2023-29053 by parsing specially crafted JT files that trigger an out of bounds read vulnerability.
Is there a fix available for CVE-2023-29053?
Yes, Siemens has released a fix for CVE-2023-29053. Please refer to the provided reference link for more information.