CVE-2023-29053
Last modified
CVE-2023-29053 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Jt Open Toolkit | < 11.3.2.0 |
| Siemens | Jt Utilities | < 13.3.0.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-29053?
How severe is CVE-2023-29053?
How do I fix CVE-2023-29053?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-29048A component for parsing OXMF templates could be abused to ex…8.8
- CVE-2023-29049The "upsell" widget at the portal page could be abused to in…6.1
- CVE-2023-2905Due to a failure in validating the length of a provided MQTT…8.8
- CVE-2023-29050The optional "LDAP contacts provider" could be abused by pri…9.6
- CVE-2023-29051User-defined OXMF templates could be used to access a limite…8.1
- CVE-2023-29052Users were able to define disclaimer texts for an upsell sho…5.4
- CVE-2023-29054A vulnerability has been identified in SCALANCE X200-4P IRT …7.4
- CVE-2023-29055In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Co…7.5
- CVE-2023-29056A valid LDAP user, under specific conditions, will default t…5.9
- CVE-2023-29057A valid XCC user's local account permissions overrides their…8.8
- CVE-2023-29058A valid, authenticated XCC user with read-only permissions c…6.5
- CVE-2023-290593CX DesktopApp through 18.12.416 has embedded malicious code…7.8
Are you affected by CVE-2023-29053?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST