CVE-2023-30795

HIGH 7.8CVE-2023-30795 · Published 08/08/2023 · updated 17/06/2026

In short

CVE-2023-30795 is a HIGH (CVSS 7.8) vulnerability affecting jt open (siemens), jt utilities (siemens), parasolid (siemens).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.3% of all vulnerabilities.
Fix: update to 11.4, 13.4, 34.0.253, 34.1.243 or later.

Package	Affected versions	Patched versions
jt open siemens	`< 11.4`	`11.4`
jt utilities siemens	`< 13.4`	`13.4`
parasolid siemens	`≥ 34.0, < 34.0.253≥ 34.1, < 34.1.243≥ 35.0, < 35.0.177≥ 35.1, < 35.1.073`	`34.0.25334.1.24335.0.17735.1.073`

Description

A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < V34.0.253), Parasolid V34.1 (All versions < V34.1.243), Parasolid V35.0 (All versions < V35.0.177), Parasolid V35.1 (All versions < V35.1.073). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

References

cert-portal.siemens.com/productcert/pdf/ssa-001569.pdf · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free