CVE-2023-7066

EUVD-2023-59253
The affected applications contain an out of bounds read past the end of 
an allocated structure while parsing specially crafted PDF files. This 
could allow an attacker to execute code in the context of the current 
process.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
siemensjt2go
𝑥
< 14.3.0.8
ADP
siemensteamcenter_visualization
𝑥
< 14.1.0.14
ADP
siemensteamcenter_visualization
𝑥
< 14.2.0.10
ADP
siemensteamcenter_visualization
𝑥
< 14.3.0.8
ADP
siemensteamcenter_visualization
𝑥
< 2312.0002
ADP
siemensteamcenter_visualization
𝑥
< 14.1.0.14
ADP
siemensteamcenter_visualization
𝑥
< 14.2.0.10
ADP
siemensteamcenter_visualization
𝑥
< 14.3.0.8
ADP
siemensteamcenter_visualization
𝑥
< 2312.0002
ADP
siemensteamcenter_visualization
𝑥
< 14.1.0.14
ADP
siemensteamcenter_visualization
𝑥
< 14.2.0.10
ADP
siemensteamcenter_visualization
𝑥
< 14.3.0.8
ADP
siemensteamcenter_visualization
𝑥
< 2312.0002
ADP
siemensteamcenter_visualization
𝑥
< 14.1.0.14
ADP
siemensteamcenter_visualization
𝑥
< 14.2.0.10
ADP
siemensteamcenter_visualization
𝑥
< 14.3.0.8
ADP
siemensteamcenter_visualization
𝑥
< 2312.0002
ADP
Common Weakness Enumeration
References
https://cert-portal.siemens.com/productcert/html/ssa-722010.html
https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-03