CVE:CVE-2023-28830
CNNVD:CNNVD-202308-572
Siemens JT2GO是德国西门子（Siemens）公司的一款JT文件查看器。该软件用于三维图形轻量化预览，可进行3D缩放、全景、旋转、缩放和重定位，具有精确3D测量、基本3D剖面查看、改进的选项过滤器等多种功能。
Siemens 多款产品存在安全漏洞，该漏洞源于包含一个释放后重用漏洞，在解析特制的 ASM 文件时可能会触发该漏洞。以下产品及版本受到影响：JT2Go，Solid Edge SE2022，Solid Edge SE2023，Teamcenter Visualization V13.2，Teamcenter Visualization V13.3，Teamcenter Visualization V14.1，Teamcenter Visualization V14.2。
solution:Upgrade siemens jt2go to a higher version than 14.2.0.5,and avoid the version (,14.2.0.5); Upgrade siemens teamcenter_visualization to a higher version than 13.2.0.15,13.3.0.11,14.1.0.11,14.2.0.5,and avoid the version [13.2.0,13.2.0.15),[13.3.0,13.3.0.11),[14.1,14.1.0.11),[14.2,14.2.0.5); Upgrade siemens solid_edge_se2022 to a higher version than -,maintenance_pack_1,maintenance_pack_2,maintenance_pack_3,maintenance_pack_4,maintenance_pack_5,maintenance_pack_7,maintenance_pack_8,maintenance_pack_9,maintenance_pack_10,maintenance_pack_11,maintenance_pack_12,and avoid the version maintenance_pack_1,maintenance_pack_2,maintenance_pack_3,maintenance_pack_4,maintenance_pack_5,maintenance_pack_7,maintenance_pack_8,maintenance_pack_9,maintenance_pack_10,maintenance_pack_11,maintenance_pack_12; Upgrade siemens solid_edge_se2023 to a higher version than -,update_0001,update_0002,update_0003,and avoid the version update_0001,update_0002,update_0003