Summary
JT Open Toolkit and JT Utilities are affected by a memory corruption vulnerability that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or potentially lead to arbitrary code execution.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
High 7.8
A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-642810.html
-
SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-642810.pdf
-
SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-642810.txt
-
ICS Advisory ICSA-23-103-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-02
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B