CVE-2022-41281

published 2022-12-13

CVE-2022-41281: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization…

Priority P3 38 high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
siemens	jt2go	—	—
siemens	teamcenter_visualization	>= 13.2.0 < 13.2.0.12	13.2.0.12
siemens	teamcenter_visualization	>= 13.3.0 < 13.3.0.8	13.3.0.8
siemens	teamcenter_visualization	>= 14.0 < 14.0.0.4	14.0.0.4
siemens	teamcenter_visualization	>= 14.1 < 14.1.0.6	14.1.0.6
siemens	teamcenter_visualization_v13.2	—	—
siemens	teamcenter_visualization_v13.3	—	—
siemens	teamcenter_visualization_v14.0	—	—
siemens	teamcenter_visualization_v14.1	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-125