← Back

CVE-2022-47936

nvd nist
Published: Feb 14, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

Affected (6)

Siemens
3 products
Jt Open Toolkit
Jt Utilities
Parasolid
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Jt Open Toolkit
Before 11.2.3.0
Jt Utilities
Before 11.2.3.0
Siemens
Parasolid
From 34.0 to 34.0.252
Parasolid
From 34.1 to 34.1.242
Parasolid
From 35.0 to 35.0.170
Parasolid
From 35.1 to 35.1.150

Related CWEs

CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (2)

Source: productcert@siemens.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.