CVE-2023-38075

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Sep 12, 2023
Updated: Jan 25, 2024
CWE ID 416

Summary

CVE-2023-38075 is a use-after-free vulnerability that affects multiple versions of JT2Go, Teamcenter Visualization, and Tecnomatix Plant Simulation software. The vulnerability can be exploited by an attacker through specially crafted WRL files, which could lead to code execution within the current process. The risk score for this vulnerability is 25, indicating a high level of severity. To remediate this vulnerability, users should update their software to versions V14.3.0.1 or higher for JT2Go, V13.3.0.12 or higher for Teamcenter Visualization V13.3, and V14.1.0.11 or higher for Teamcenter Visualization V14.1, among others affected versions. This vulnerability poses a significant danger to organizations as it could allow attackers to gain unauthorized access and potentially compromise the confidentiality and integrity of their systems and data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-38075 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions