CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-41661
https://notcve.org/view.php?id=CVE-2022-41661
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.1.0.4), Teamcenter Visualization V13.2 (Todas las versiones < V13.2.0.12), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0. 7), Teamcenter Visualization V14.0 (todas las versiones < V14.0.0.3), Teamcenter Visualization V14.1 (todas las versiones < V14.1.0.4). Los productos afectados contienen una vulnerabilidad de lectura fuera de límites al analizar un archivo CGM. • https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-41663
https://notcve.org/view.php?id=CVE-2022-41663
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted CGM files. An attacker could leverage this vulnerability to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.1.0.4), Teamcenter Visualization V13.2 (Todas las versiones < V13.2.0.12), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0. 7), Teamcenter Visualization V14.0 (todas las versiones < V14.0.0.3), Teamcenter Visualization V14.1 (todas las versiones < V14.1.0.4). Las aplicaciones afectadas contienen una vulnerabilidad de use-after-free que podría activarse al analizar archivos CGM especialmente manipulados. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. • https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-39136
https://notcve.org/view.php?id=CVE-2022-39136
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V13.3 (All versions >= V13.3.0.7 < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected application is vulnerable to fixed-length heap-based buffer while parsing specially crafted TIF files. An attacker could leverage this vulnerability to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.1.0.4), Teamcenter Visualization V13.2 (Todas las versiones < V13.2.0.12), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0. 7), Teamcenter Visualization V13.3 (Todas las versiones >= V13.3.0.7 < V13.3.0.8), Teamcenter Visualization V14.0 (Todas las versiones < V14.0.0.3), Teamcenter Visualization V14.1 (Todas las versiones < V14.1.0.4). La aplicación afectada es vulnerable al búfer basado en montón de longitud fija mientras analiza archivos TIF especialmente manipulados. • https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-41664
https://notcve.org/view.php?id=CVE-2022-41664
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected application contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.1.0.4), Teamcenter Visualization V13.2 (Todas las versiones < V13.2.0.12), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0. 7), Teamcenter Visualization V14.0 (todas las versiones < V14.0.0.3), Teamcenter Visualization V14.1 (todas las versiones < V14.1.0.4). La aplicación afectada contiene una vulnerabilidad de desbordamiento del búfer que podría activarse al analizar archivos PDF especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual. • https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-41660
https://notcve.org/view.php?id=CVE-2022-41660
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds write vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V14.1.0.4), Teamcenter Visualization V13.2 (Todas las versiones < V13.2.0.12), Teamcenter Visualization V13.3 (Todas las versiones < V13.3.0. 7), Teamcenter Visualization V14.0 (todas las versiones < V14.0.0.3), Teamcenter Visualization V14.1 (todas las versiones< V14.1.0.4). Los productos afectados contienen una vulnerabilidad de escritura fuera de límites al analizar un archivo CGM. • https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf • CWE-787: Out-of-bounds Write •