Summary
Siemens JT2Go, Teamcenter Visualization and Solid Edge are affected by multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as ASM or TIFF file format) with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 3
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Updat…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions <…
Revision history
-
#1
Publication date
References
-
SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-131450.html
-
SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-131450.pdf
-
SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-131450.txt