Description
A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.10), Teamcenter Visualization V2312 (All versions < V2312.0005). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted X_T files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT2Go | < V2312.0005 | V2312.0005 |
| Siemens | Teamcenter Visualization V14.2 | < V14.2.0.12 | V14.2.0.12 |
| Siemens | Teamcenter Visualization V14.3 | < V14.3.0.10 | V14.3.0.10 |
| Siemens | Teamcenter Visualization V2312 | < V2312.0005 | V2312.0005 |
Advisories 6
- NCSC-2024-0332 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 13, 2024
- ICSA-24-228-03 Siemens Teamcenter Visualization and JT2Go CISA ICS & IT advisories · Aug 13, 2024
- SSA-856475 SSA-856475: X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go Siemens ProductCERT · Aug 13, 2024
- WID-SEC-2024-1819 Siemens JT2Go: Mehrere Schwachstellen ermöglichen Codeausführung und Denial of Service BSI CERT-Bund (WID) · Aug 12, 2024
- ICSA-24-137-01 Siemens Parasolid CISA ICS & IT advisories · May 14, 2024
- SSA-046364 SSA-046364: X_T File Parsing Vulnerabilities in Parasolid Siemens ProductCERT · May 14, 2024