Description
A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization V14.2 (All versions < V14.2.0.10), Teamcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization V2312 (All versions < V2312.0001). The affected applications contain a stack overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT2Go | < V2312.0001 | V2312.0001 |
| Siemens | Teamcenter Visualization V14.1 | < V14.1.0.13 | V14.1.0.13 |
| Siemens | Teamcenter Visualization V14.2 | < V14.2.0.10 | V14.2.0.10 |
| Siemens | Teamcenter Visualization V14.3 | < V14.3.0.7 | V14.3.0.7 |
| Siemens | Teamcenter Visualization V2312 | < V2312.0001 | V2312.0001 |
Advisories 3
- ICSA-24-137-03 Siemens Teamcenter Visualization and JT2Go CISA ICS & IT advisories · May 14, 2024
- SSA-661579 SSA-661579: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go Siemens ProductCERT · May 14, 2024
- WID-SEC-2024-1105 Siemens JT2Go: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 13, 2024