Summary
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads a malicious file in CGM or RAS format. If a user is tricked to open a malicious file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 12
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
Low 3.3
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
Low 3.3
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
Low 3.3
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
Low 3.3
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
Low 3.3
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
-
Low 3.3
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…
Revision history
-
#3
Added fix for JT2Go
-
#2
Added remediation for Teamcenter Visualization version lines V13.3 and V14.0 for CVE-2022-45484
-
#1
Publication Date
References
-
SSA-700053: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-700053.html
-
SSA-700053: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
-
SSA-700053: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-700053.txt