CVE-2024-26275

Published: Apr 9, 2024Modified: Jun 17, 2026

7.3

Vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

Affected (7)

Products: Siemens: Jt2go, Parasolid, Teamcenter Visualization

Siemens

3 products

Jt2go

Parasolid

Teamcenter Visualization

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Siemens Jt2go	From 2312.0 to 2312.0004
Siemens Parasolid	From 35.1 to 35.1.254
Siemens Parasolid	From 36.0 to 36.0.207
Siemens Parasolid	From 36.1 to 36.1.147
Siemens Teamcenter Visualization	From 14.2 to 14.2.0.12
Siemens Teamcenter Visualization	From 14.3 to 14.3.0.9
Siemens Teamcenter Visualization	From 2312.0 to 2312.0004