Description
A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT Open | All versions < V11.2.3.0 | — |
| Siemens | JT Utilities | All versions < V13.2.3.0 | — |
| Siemens | Parasolid V34.0 | All versions < V34.0.252 | — |
| Siemens | Parasolid V34.1 | All versions < V34.1.242 | — |
| Siemens | Parasolid V35.0 | All versions < V35.0.170 | — |
| Siemens | Parasolid V35.1 | All versions < V35.1.150 | — |
Advisories 2
- ICSA-23-047-12 Siemens JT Open, JT Utilities, and Parasolid CISA ICS & IT advisories · Feb 14, 2023
- SSA-836777 SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid Siemens ProductCERT · Feb 14, 2023