Skip to content
OpenAdvisories
High SSA-120378 6 CVEs

SSA-120378: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Published Nov 8, 2022 · Updated Jun 13, 2023 · Revision 3

Vendor: Siemens Product: JT2Go Product: Teamcenter Visualization V13.2 Product: Teamcenter Visualization V13.3 Product: Teamcenter Visualization V14.0 Product: Teamcenter Visualization V14.1

Summary

Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious TIF, CGM or PDF files. If a user is tricked to open a malicious TIF, CGM or PDF file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 6

Revision history

  1. #3

    Added fix for Teamcenter Visualization version line V13.2

  2. #2

    Added fix for Teamcenter Visualization version line V13.3 for CVE-2022-39136

  3. #1

    Publication Date

References