High SSA-836777 3 CVEs

SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid

Published Feb 14, 2023 · Updated Feb 14, 2023

Vendor: Siemens Product: JT Open Product: JT Utilities Product: Parasolid V34.0 Product: Parasolid V34.1 Product: Parasolid V35.0 Product: Parasolid V35.1

Summary

JT Open Toolkit, JT Utilities and Parasolid are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or potentially lead to arbitrary code execution.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

High 7.8

CVE-2022-47936

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Par…

Siemens Parasolid V35.0 Parasolid V34.1 JT Utilities ICS / OT

Feb 14, 2023
High 7.8

CVE-2022-47977

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The…

Siemens JT Utilities JT Open ICS / OT

Feb 14, 2023
High 7.8

CVE-2023-25140

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 Browsers ICS / OT

Feb 14, 2023

Revision history

2023-02-14 #1
Publication Date

References

SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf
SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-836777.txt