Siemens Jt Open Toolkit vulnerabilities
29 known vulnerabilities affecting siemens/jt_open_toolkit.
Total CVEs
29
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH25LOW4
Vulnerabilities
Page 2 of 2
CVE-2021-44432HIGHCVSS 7.8fixed in 11.1.1.02021-12-14
CVE-2021-44432 [HIGH] CWE-121 CVE-2021-44432: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions <
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14845)
nvd
CVE-2021-44443HIGHCVSS 7.8fixed in 11.1.1.02021-12-14
CVE-2021-44443 [HIGH] CWE-787 CVE-2021-44443: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions <
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-
nvd
CVE-2021-44441HIGHCVSS 7.8fixed in 11.1.1.02021-12-14
CVE-2021-44441 [HIGH] CWE-787 CVE-2021-44441: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions <
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-
nvd
CVE-2021-44434HIGHCVSS 7.8fixed in 11.1.1.02021-12-14
CVE-2021-44434 [HIGH] CWE-787 CVE-2021-44434: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions <
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (
nvd
CVE-2021-44435HIGHCVSS 7.8fixed in 11.1.1.02021-12-14
CVE-2021-44435 [HIGH] CWE-121 CVE-2021-44435: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions <
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14903)
nvd
CVE-2021-44436LOWCVSS 3.3fixed in 11.1.1.02021-12-14
CVE-2021-44436 [LOW] CWE-125 CVE-2021-44436: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions <
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the cur
nvd
CVE-2021-44448LOWCVSS 3.3fixed in 11.0.3.02021-12-14
CVE-2021-44448 [LOW] CWE-125 CVE-2021-44448: A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions <
A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI
nvd
CVE-2021-44444LOWCVSS 3.3fixed in 11.1.1.02021-12-14
CVE-2021-44444 [LOW] CWE-125 CVE-2021-44444: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions <
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the cur
nvd
CVE-2021-44431LOWCVSS 3.3fixed in 11.1.1.02021-12-14
CVE-2021-44431 [LOW] CWE-125 CVE-2021-44431: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions <
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the cur
nvd
← Previous2 / 2