CVE-2023-33121: Null Pointer Dereference
A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JT2Goto a version that resolves this vulnerability.Fixed in V14.2.0.3 - Upgrade
Upgrade
Teamcenter Visualization V13.2to a version that resolves this vulnerability.Fixed in V13.2.0.13 - Upgrade
Upgrade
Teamcenter Visualization V13.3to a version that resolves this vulnerability.Fixed in V13.3.0.10 - Upgrade
Upgrade
Teamcenter Visualization V14.0to a version that resolves this vulnerability.Fixed in V14.0.0.6 - Upgrade
Upgrade
Teamcenter Visualization V14.1to a version that resolves this vulnerability.Fixed in V14.1.0.8 - Upgrade
Upgrade
Teamcenter Visualization V14.2to a version that resolves this vulnerability.Fixed in V14.2.0.3
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-33121.
Which software versions are affected by the vulnerability?
The vulnerability affects JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), and Teamcenter Visualization V14.2 (All versions < V14.2.0.3).
What is the severity of CVE-2023-33121?
The severity of CVE-2023-33121 is medium with a CVSS score of 5.5.
How can I fix CVE-2023-33121?
To fix CVE-2023-33121, update JT2Go to version V14.2.0.3 or later and update Teamcenter Visualization to V13.2.0.13 or later, V13.3.0.10 or later, V14.0.0.6 or later, V14.1.0.8 or later, or V14.2.0.3 or later.
Where can I find more information about CVE-2023-33121?
You can find more information about CVE-2023-33121 in the following reference: [Siemens ProductCERT Advisory SSA-538795](https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf).