CVE-2024-34086

published 2024-05-14

CVE-2024-34086: A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization…

Priority P3 41 high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization V14.2 (All versions < V14.2.0.10), Teamcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization V2312 (All versions < V2312.0001). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted CGM file.
This could allow an attacker to execute code in the context of the current process.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
siemens	jt2go	< V2312.0001	V2312.0001
siemens	jt2go	< 2312.0001	2312.0001
siemens	teamcenter_visualization	>= 14.1 < 14.1.0.13	14.1.0.13
siemens	teamcenter_visualization	>= 14.2 < 14.2.0.10	14.2.0.10
siemens	teamcenter_visualization	>= 14.3 < 14.3.0.7	14.3.0.7
siemens	teamcenter_visualization	>= 2312.0 < 2312.0001	2312.0001
siemens	teamcenter_visualization_v14.1	< V14.1.0.13	V14.1.0.13
siemens	teamcenter_visualization_v14.2	< V14.2.0.10	V14.2.0.10
siemens	teamcenter_visualization_v14.3	< V14.3.0.7	V14.3.0.7
siemens	teamcenter_visualization_v2312	< V2312.0001	V2312.0001

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-787