CVE-2024-37997

CWE-121 — Stack-based Buffer Overflow13 documents4 sources
Severity
7.3HIGH
EPSS
0.1%
top 73.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Siemens Jt2goSiemens JT OpenSiemens PLM XML SDK+4 more
Timeline
PublishedJul 9
Latest updateAug 4

Description

A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a stack based overflow vulnerability while parsing specially crafted XML files.…

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages7 packages

▶CVEListV5siemens/jt2go< V2406.0003

🔴Vulnerability Details

12
OSV
linux-iot vulnerabilities↗2025-08-04
▶
OSV
linux-azure vulnerabilities↗2025-07-30
▶
OSV
linux-azure, linux-azure-5.4, linux-azure-fips, linux-raspi, linux-raspi-5.4 vulnerabilities↗2025-07-29
▶
OSV
linux, linux-aws, linux-aws-5.4, linux-aws-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5↗2025-07-25
▶
OSV
linux-xilinx-zynqmp vulnerabilities↗2025-07-11
▶
CVE-2024-37997 (HIGH CVSS 7.3) | A vulnerability has been identified | cvebase.io