← Back

CVE-2024-34086

nvd nist
Published: May 14, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization V14.2 (All versions < V14.2.0.10), Teamcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization V2312 (All versions < V2312.0001). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted CGM file. This could allow an attacker to execute code in the context of the current process.

Affected (5)

Siemens
2 products
Jt2go
Teamcenter Visualization
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Jt2go
Before 2312.0001
Siemens
Teamcenter Visualization
From 14.1 to 14.1.0.13
Teamcenter Visualization
From 14.2 to 14.2.0.10
Teamcenter Visualization
From 14.3 to 14.3.0.7
Teamcenter Visualization
From 2312.0 to 2312.0001

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: productcert@siemens.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.