Siemens Jt2Go vulnerabilities

CVE-2021-44016 [HIGH] CWE-119 CVE-2021-44016: A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All vers A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlA

CVE-2021-44018 [HIGH] CWE-125 CVE-2021-44018: A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All vers A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlA

CVE-2021-44000 [HIGH] CWE-122 CVE-2021-44000: A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All vers A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlA

CVE-2021-44006 [HIGH] CWE-787 CVE-2021-44006: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process.

CVE-2021-44013 [HIGH] CWE-787 CVE-2021-44013: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-151

CVE-2021-44001 [HIGH] CWE-787 CVE-2021-44001: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14

CVE-2021-44005 [HIGH] CWE-787 CVE-2021-44005: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process.

CVE-2021-44014 [HIGH] CWE-416 CVE-2021-44014: A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All version A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of t

CVE-2021-44002 [HIGH] CWE-787 CVE-2021-44002: A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All version A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current

CVE-2021-44003 [MEDIUM] CWE-457 CVE-2021-44003: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to use of uninitialized memory while parsing user supplied TIFF files. This could allow an attacker to cause a denial-of-service condition.

CVE-2021-44008 [MEDIUM] CWE-125 CVE-2021-44008: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process.

CVE-2021-44009 [MEDIUM] CWE-125 CVE-2021-44009: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process.

CVE-2021-44010 [MEDIUM] CWE-125 CVE-2021-44010: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process.

CVE-2021-44012 [MEDIUM] CWE-125 CVE-2021-44012: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the curren

CVE-2021-44004 [MEDIUM] CWE-125 CVE-2021-44004: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process.

CVE-2021-44017 [MEDIUM] CWE-125 CVE-2021-44017: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Image.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted TIF files. An attacker could leverage this vulnerability to leak information in the context of the curren

CVE-2021-44015 [MEDIUM] CWE-125 CVE-2021-44015: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The VCRUNTIME140.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted CGM files. An attacker could leverage this vulnerability to leak information in the context of the

CVE-2021-44011 [MEDIUM] CWE-125 CVE-2021-44011: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer while parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the curre

CVE-2021-44007 [MEDIUM] CWE-193 CVE-2021-44007: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an off-by-one error in the heap while parsing specially crafted TIFF files. This could allow an attacker to cause a denial-of-service condition.

CVE-2021-33717 [MEDIUM] CWE-476 CVE-2021-33717: A vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization (All versions < V13.2.0.1). When parsing specially crafted CGM Files, a NULL pointer deference condition could cause the application to crash. The application must be restarted to restore the service. An attacker could leverage this vulnerability to cau