CVE-2023-38532

A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition.

Score

CVSS 3.1 5.5 Medium

Status

Modified - productcert@siemens.com

Published

2023-08-08

Last modified

2024-11-25

Weaknesses

CWE-770

Affected products

• Parasolid (Siemens)
• Parasolid V34.1 (Siemens)
• Parasolid V35.0 (Siemens)
• Parasolid V35.1 (Siemens)
• Teamcenter Visualization (Siemens)
• Teamcenter Visualization V14.1 (Siemens)
• Teamcenter Visualization V14.2 (Siemens)
• Teamcenter Visualization V14.3 (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-407785.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf