CyberzSOC

Publication detail
← Back to advisories & guidance

ICSA-24-011-06: Siemens Teamcenter Visualization and JT2Go ↗ source

January 11, 2024 CISA ICS Advisory
Source: https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-06

Summary

Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM files. If a user is tricked to open a malicious CGM file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions. CVE-2023-51439: The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process. CVE-2023-51744: The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition. CVE-2023-51745: The affected applications contain a stack overflow vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process. CVE-2023-51746: The affected applications contain a stack overflow vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.

Advisory Details CISA ICS CSAF feed

Advisory ID
ICSA-24-011-06
Status
Final · version 1
Initial release
2024-01-09
Last revised
2024-01-09
Vendor
Siemens
Critical infrastructure sectors
Multiple
Deployed
Worldwide
Vendor headquarters
Germany

Republished vendor advisory. This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.

General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Credit: Siemens ProductCERT

Affected products (5)
  • JT2Go — <V14.3.0.6
  • Teamcenter Visualization V13.3 — <V13.3.0.13
  • Teamcenter Visualization V14.1 — <V14.1.0.12
  • Teamcenter Visualization V14.2 — <V14.2.0.9
  • Teamcenter Visualization V14.3 — <V14.3.0.6

From CISA's machine-readable CSAF 2.0 advisory (JSON).

Vulnerabilities as Stated by the Advisory

CVEWeaknessCVSS v3Details
CVE-2023-51439 CWE-125 Out-of-bounds Read 7.8 High CVE-2023-51439
The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.

Mitigation: Do not open untrusted CGM files in JT2Go and Teamcenter Visualization

Vendor fix: Update to V13.3.0.13 or later version ↗

Vendor fix: Update to V14.1.0.12 or later version ↗

Affected, fixed & timeline

Affected:

  • JT2Go <V14.3.0.6
  • Teamcenter Visualization V13.3 <V13.3.0.13
  • Teamcenter Visualization V14.1 <V14.1.0.12
  • Teamcenter Visualization V14.2 <V14.2.0.9
  • Teamcenter Visualization V14.3 <V14.3.0.6

Vendor fix: Update to V14.2.0.9 or later version

Vendor fix: Update to V14.3.0.6 or later version

Vendor fix: Update to V14.3.0.6 or later version
CVE-2023-51745 CWE-121 Stack-based Buffer Overflow 7.8 High CVE-2023-51745
The affected applications contain a stack overflow vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.

Mitigation: Do not open untrusted CGM files in JT2Go and Teamcenter Visualization

Vendor fix: Update to V13.3.0.13 or later version ↗

Vendor fix: Update to V14.1.0.12 or later version ↗

Affected, fixed & timeline

Affected:

  • JT2Go <V14.3.0.6
  • Teamcenter Visualization V13.3 <V13.3.0.13
  • Teamcenter Visualization V14.1 <V14.1.0.12
  • Teamcenter Visualization V14.2 <V14.2.0.9
  • Teamcenter Visualization V14.3 <V14.3.0.6

Vendor fix: Update to V14.2.0.9 or later version

Vendor fix: Update to V14.3.0.6 or later version

Vendor fix: Update to V14.3.0.6 or later version
CVE-2023-51746 CWE-121 Stack-based Buffer Overflow 7.8 High CVE-2023-51746
The affected applications contain a stack overflow vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.

Mitigation: Do not open untrusted CGM files in JT2Go and Teamcenter Visualization

Vendor fix: Update to V13.3.0.13 or later version ↗

Vendor fix: Update to V14.1.0.12 or later version ↗

Affected, fixed & timeline

Affected:

  • JT2Go <V14.3.0.6
  • Teamcenter Visualization V13.3 <V13.3.0.13
  • Teamcenter Visualization V14.1 <V14.1.0.12
  • Teamcenter Visualization V14.2 <V14.2.0.9
  • Teamcenter Visualization V14.3 <V14.3.0.6

Vendor fix: Update to V14.2.0.9 or later version

Vendor fix: Update to V14.3.0.6 or later version

Vendor fix: Update to V14.3.0.6 or later version
CVE-2023-51744 CWE-476 NULL Pointer Dereference 3.3 Low CVE-2023-51744
The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Mitigation: Do not open untrusted CGM files in JT2Go and Teamcenter Visualization

Vendor fix: Update to V13.3.0.13 or later version ↗

Vendor fix: Update to V14.1.0.12 or later version ↗

Affected, fixed & timeline

Affected:

  • JT2Go <V14.3.0.6
  • Teamcenter Visualization V13.3 <V13.3.0.13
  • Teamcenter Visualization V14.1 <V14.1.0.12
  • Teamcenter Visualization V14.2 <V14.2.0.9
  • Teamcenter Visualization V14.3 <V14.3.0.6

Vendor fix: Update to V14.2.0.9 or later version

Vendor fix: Update to V14.3.0.6 or later version

Vendor fix: Update to V14.3.0.6 or later version

Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2023-51439 7.8 High Siemens JT2Go A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visua…
CVE-2023-51745 7.8 High Siemens JT2Go A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visua…
CVE-2023-51746 7.8 High Siemens JT2Go A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visua…
CVE-2023-51744 3.3 Low Siemens JT2Go A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visua…

Named by the advisory itself. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Siemens 2 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.