Description
A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.10), Teamcenter Visualization V2312 (All versions < V2312.0005). The affected applications contain an out of bounds read past the unmapped memory region while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT2Go | < V2312.0005 | V2312.0005 |
| Siemens | Teamcenter Visualization V14.2 | < V14.2.0.12 | V14.2.0.12 |
| Siemens | Teamcenter Visualization V14.3 | < V14.3.0.10 | V14.3.0.10 |
| Siemens | Teamcenter Visualization V2312 | < V2312.0005 | V2312.0005 |
Advisories 6
- NCSC-2024-0332 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 13, 2024
- ICSA-24-228-03 Siemens Teamcenter Visualization and JT2Go CISA ICS & IT advisories · Aug 13, 2024
- SSA-856475 SSA-856475: X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go Siemens ProductCERT · Aug 13, 2024
- WID-SEC-2024-1819 Siemens JT2Go: Mehrere Schwachstellen ermöglichen Codeausführung und Denial of Service BSI CERT-Bund (WID) · Aug 12, 2024
- ICSA-24-137-01 Siemens Parasolid CISA ICS & IT advisories · May 14, 2024
- SSA-046364 SSA-046364: X_T File Parsing Vulnerabilities in Parasolid Siemens ProductCERT · May 14, 2024