CVE-2023-28830
Estado: ModificadaAlta (7.8)—
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions < V13.3.0.11), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted ASM file. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.33%
- Percentil entre todas las CVEs puntuadas: 24
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-416
- CWE-416
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-28830",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-28830",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-10-23T19:48:40.205775Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "productcert@siemens.com",
"affectedData": [
{
"vendor": "Siemens",
"product": "JT2Go",
"versions": [
{
"status": "affected",
"version": "All versions < V14.2.0.5"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Solid Edge SE2022",
"versions": [
{
"status": "affected",
"version": "All versions < V222.0 Update 13"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Solid Edge SE2023",
"versions": [
{
"status": "affected",
"version": "All versions < V223.0 Update 4"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V13.2",
"versions": [
{
"status": "affected",
"version": "All versions < V13.2.0.15"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V13.3",
"versions": [
{
"status": "affected",
"version": "All versions < V13.3.0.11"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V14.1",
"versions": [
{
"status": "affected",
"version": "All versions < V14.1.0.11"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Teamcenter Visualization V14.2",
"versions": [
{
"status": "affected",
"version": "All versions < V14.2.0.5"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2023-08-08T10:15:14.847",
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf",
"tags": [
"Vendor Advisory"
],
"source": "productcert@siemens.com"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions < V13.3.0.11), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted ASM file. An attacker could leverage this vulnerability to execute code in the context of the current process."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones inferiores a V14.2.0.5), Solid Edge SE2022 (Todas las versiones inferiores a V222.0 Update 13), Solid Edge SE2023 (Todas las versiones inferiores a V223.0 Update 4), Teamcenter Visualization V13. 2 (Todas las versiones inferiores a V13.2.0.15), Teamcenter Visualization V13.3 (Todas las versiones inferiores a V13.3.0.11), Teamcenter Visualization V14.1 (Todas las versiones inferiores a V14.1.0.11), Teamcenter Visualization V14.2 (Todas las versiones inferiores a V14.2.0.5). La aplicación afectada contiene una vulnerabilidad \"use-after-free\" que podría activarse al analizar un archivo ASM especialmente diseñado. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual."
}
],
"lastModified": "2026-06-17T05:48:51.617",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52B9AF54-6EAC-4333-932B-7DD2F00CEDCE",
"versionEndExcluding": "14.2.0.5"
},
{
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B51820E2-ED58-4CF9-9141-9875185E5034",
"versionEndExcluding": "13.2.0.15",
"versionStartIncluding": "13.2.0"
},
{
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "677E517E-AF71-4D17-8200-F46545800581",
"versionEndExcluding": "13.3.0.11",
"versionStartIncluding": "13.3.0"
},
{
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EF3388B-D057-4DB9-96AE-B6F4678FE5B8",
"versionEndExcluding": "14.1.0.11",
"versionStartIncluding": "14.1"
},
{
"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2FB1524-FFB8-4190-A221-248509EC6756",
"versionEndExcluding": "14.2.0.5",
"versionStartIncluding": "14.2"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22C0D3BE-0640-49C8-86F1-52966CABA2E2"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE12CBDF-222E-4DE9-927A-3BDDBFFF1E1A"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEFAAAE5-52B1-48EA-98E1-98A854CBE65A"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5AFCFBB-ED56-4DDB-89D8-B47A20821AB8"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "087A9E78-9E5C-4D94-A251-02F9AB160F54"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68EE0588-FE7F-4581-9484-52404DB5B99A"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F72318F-0E9C-4AB1-9CA2-6527513AE0F6"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63C93992-17F7-4499-BC57-BD67E8A6C508"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7180CEA7-150A-4B1D-BDFD-61C320A33148"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0244EE5-BF22-491A-A7DE-48F44E2A17FC"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A583AAD-5B13-4822-AA24-AA7D16305FE2"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "543549E2-CD73-48ED-8BB3-2BAC721A850C"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2023:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60B92DC2-5A0D-4F6E-81FD-3A0CA25B0D32"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2023:update_0001:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E10B6B37-8C69-47B6-A4B8-DDBA562F083E"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2023:update_0002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB3FFA6A-3A27-4F38-9A4B-E869880A1861"
},
{
"criteria": "cpe:2.3:a:siemens:solid_edge_se2023:update_0003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C35655ED-9061-4674-9321-1485AABBCE06"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "productcert@siemens.com"
}