Description
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a missing check for the validity of an iterator leads to NULL pointer deference condition, causing the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT Utilities | All versions < V13.0.2.0 | — |
Advisories 2
- ICSA-21-194-09 Siemens JT Utilities CISA ICS & IT advisories · May 6, 2025
- SSA-209268 SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 Siemens ProductCERT · Jul 13, 2021