ICS Advisory: Siemens Teamcenter Visualization and JT2Go

Here is a summary of the provided document:

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has announced that it will no longer update ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. The advisory warns of three vulnerabilities in Siemens' JT2Go and Teamcenter Visualization software, including an out-of-bounds read, a NULL pointer dereference, and two stack-based buffer overflows. These vulnerabilities could allow an attacker to execute code in the context of the software's current process or crash the application, potentially causing a denial of service. The CVEs assigned to these vulnerabilities are CVE-2023-51439, CVE-2023-51744, and CVE-2023-51745. The advisory recommends updating software to the latest version and provides additional mitigations, such as minimizing network exposure and using secure remote access methods.