Medium SSA-209268 3 CVEs

SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0

Published Jul 13, 2021 · Updated Jul 13, 2021

Vendor: Siemens Product: JT Utilities

Summary

Siemens has released version V13.0.2.0 for JT Utilities to ﬁx multiple vulnerabilities that could be triggered when reading JT ﬁles.

Siemens recommends to update to the latest version, which contains solutions to all the vulnerabilities listed in this advisory. Standing recommendation is to avoid opening of untrusted ﬁles from unknown sources in the affected product, as this generally mitigates the risk of exploitation of this class of vulnerabilities for any product release.

Vulnerabilities 3

Unscored —

CVE-2021-33713

A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files…

Siemens JT Utilities ICS / OT

Jul 13, 2021
Unscored —

CVE-2021-33714

A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files…

Siemens JT Utilities ICS / OT

Jul 13, 2021
Unscored —

CVE-2021-33715

A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files…

Siemens JT Utilities ICS / OT

Jul 13, 2021

Revision history

2021-07-13 #1
Publication Date

References

SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf
SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-209268.txt