SSA-396621 — SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1

Summary

JT Open Toolkit (JTTK) before V10.8.1.1 contains multiple vulnerabilities that could be triggered when it reads a maliciously crafted JT file. These vulnerabilities also affects JT Utilities before V12.8.1.1. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution.

Siemens recommends to update to the latest versions and to limit opening of untrusted files from unknown sources in the affected products.

Vulnerabilities 2

Unscored —

CVE-2021-44449

A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44450

A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021

Revision history

2021-12-14 #1
Publication Date

References

SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-396621.pdf
SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-396621.txt