CVE-2021-44002

Published: Dec 14, 2021Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15058, ZDI-CAN-19076, ZDI-CAN-19077)

Affected (5)

Products: Siemens: Jt2go, Jt Open Toolkit, Jt Utilities, Solid Edge, Teamcenter Visualization

5 products

Teamcenter Visualization

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Siemens Jt2go	Before 13.2.0.5
Siemens Jt Open Toolkit	Before 11.1.1.0
Siemens Jt Utilities	Before 13.1.1.0
Siemens Solid Edge	Before se2023
Siemens Teamcenter Visualization	Before 13.2.0.5