High SSA-936212 3 CVEs

SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge

Published Jan 10, 2023 · Updated Jan 10, 2023

Vendor: Siemens Product: JT Open Product: JT Utilities Product: Solid Edge

Summary

JT Open Toolkit, JT Utilities and Solid Edge are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or potentially lead to arbitrary code execution.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

High 7.8

CVE-2021-44002

A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Sol…

Siemens JT Utilities Solid Edge JT Open Browsers ICS / OT

Dec 14, 2021
High 7.8

CVE-2021-44014

A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Sol…

Siemens JT Utilities Solid Edge JT Open Browsers ICS / OT

Dec 14, 2021
High 7.8

CVE-2022-47935

A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Sol…

Siemens JT Utilities Solid Edge JT Open Browsers ICS / OT

Jan 10, 2023

Revision history

2023-01-10 #1
Publication Date

References

SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-936212.pdf
SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-936212.txt