Medium WID-SEC-2022-2296 15 CVEs

Siemens JT2Go: Mehrere Schwachstellen

Published Dec 12, 2022 · Updated Dec 12, 2022 · de-DE

Vendor: Siemens Product: JT2Go Product: JT2Go < 14.1.0.5 Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Siemens JT2Go ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service zu verursachen.

Product

JT ist ein von Siemens Ditgital Industries entwickeltes Datenformat. JT2Go ist ein kostenloser Betrachter für 3D-JT-Daten.

Vulnerabilities 15

High 7.8

CVE-2022-3159

The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially craf…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Jan 13, 2023
High 7.8

CVE-2022-3160

The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted P…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Jan 13, 2023
High 7.8

CVE-2022-3161

The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Jan 13, 2023
High 7.8

CVE-2022-41281

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41282

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41283

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41284

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41285

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41286

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
Low 3.3

CVE-2022-41278

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
Low 3.3

CVE-2022-41279

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
Low 3.3

CVE-2022-41280

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
Low 3.3

CVE-2022-41287

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
Low 3.3

CVE-2022-41288

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
Low 3.3

CVE-2022-45484

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022

Revision history

2022-12-12 #1
Initiale Fassung

References

Siemens Security Advisory by Siemens ProductCERT vom 2022-12-12
https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
Siemens Security Advisory by Siemens ProductCERT vom 2022-12-12
https://cert-portal.siemens.com/productcert/pdf/ssa-360681.pdf