CVE-2023-33124: jt2go before 14.2.0.3 (exclusive); +7 more affected products

Affected technology

jt2go · before 14.2.0.3 (exclusive)
siemens

teamcenter visualization · from 13.2.0 (inclusive), before 13.2.0.13 (exclusive)
siemens

teamcenter visualization · from 13.3.0 (inclusive), before 13.3.0.10 (exclusive)
siemens

teamcenter visualization · from 14.0 (inclusive), before 14.0.0.6 (exclusive)
siemens

teamcenter visualization · from 14.1 (inclusive), before 14.1.0.8 (exclusive)
siemens

teamcenter visualization · from 14.2 (inclusive), before 14.2.0.3 (exclusive)
siemens

JT2Go · All versions < V14.2.0.3
Siemens

Teamcenter Visualization V13.2 · All versions < V13.2.0.13
Siemens

Teamcenter Visualization V13.3 · All versions < V13.3.0.10
Siemens

Teamcenter Visualization V14.0 · All versions < V14.0.0.6
Siemens

Teamcenter Visualization V14.1 · All versions < V14.1.0.8
Siemens

Teamcenter Visualization V14.2 · All versions < V14.2.0.3
Siemens

Description’s affected range: versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · No privileges required · User interaction required

Attack conditions (NVD, CVSS 3.1): Local · No privileges required · User interaction required

What an attacker can do

An attacker could execute code in the context of the current process. Vendor/CNA’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.