High SSA-360681 3 CVEs

SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Published Dec 13, 2022 · Updated Dec 13, 2022

Vendor: Siemens Product: JT2Go Product: Teamcenter Visualization V13.3 Product: Teamcenter Visualization V14.0 Product: Teamcenter Visualization V14.1

Summary

Siemens Teamcenter Visualization and JT2Go are affected by multiple out of bounds write vulnerabilities in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

High 7.8

CVE-2022-3159

The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially craf…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Jan 13, 2023
High 7.8

CVE-2022-3160

The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted P…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Jan 13, 2023
High 7.8

CVE-2022-3161

The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Jan 13, 2023

Revision history

2022-12-13 #1
Publication Date

References

SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-360681.pdf
SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-360681.txt