Siemens Teamcenter Visualization vulnerabilities

CVE-2021-44013 [HIGH] CWE-787 CVE-2021-44013: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-151

CVE-2021-44001 [HIGH] CWE-787 CVE-2021-44001: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14

CVE-2021-44005 [HIGH] CWE-787 CVE-2021-44005: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process.

CVE-2021-44014 [HIGH] CWE-416 CVE-2021-44014: A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All version A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of t

CVE-2021-44002 [HIGH] CWE-787 CVE-2021-44002: A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All version A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current

CVE-2021-44003 [MEDIUM] CWE-457 CVE-2021-44003: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to use of uninitialized memory while parsing user supplied TIFF files. This could allow an attacker to cause a denial-of-service condition.

CVE-2021-44008 [MEDIUM] CWE-125 CVE-2021-44008: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process.

CVE-2021-44009 [MEDIUM] CWE-125 CVE-2021-44009: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process.

CVE-2021-44010 [MEDIUM] CWE-125 CVE-2021-44010: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process.

CVE-2021-44012 [MEDIUM] CWE-125 CVE-2021-44012: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the curren

CVE-2021-44004 [MEDIUM] CWE-125 CVE-2021-44004: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process.

CVE-2021-44017 [MEDIUM] CWE-125 CVE-2021-44017: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Image.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted TIF files. An attacker could leverage this vulnerability to leak information in the context of the curren

CVE-2021-44015 [MEDIUM] CWE-125 CVE-2021-44015: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The VCRUNTIME140.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted CGM files. An attacker could leverage this vulnerability to leak information in the context of the

CVE-2021-44011 [MEDIUM] CWE-125 CVE-2021-44011: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer while parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the curre

CVE-2021-44007 [MEDIUM] CWE-193 CVE-2021-44007: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an off-by-one error in the heap while parsing specially crafted TIFF files. This could allow an attacker to cause a denial-of-service condition.

CVE-2021-43336 [HIGH] CWE-787 CVE-2021-43336: An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Allianc An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file (an invalid number of properties) can trigger a write operation past the end of an allocated buffer. An attacker can leve

CVE-2021-40355 [HIGH] CWE-639 CVE-2021-40355: A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The affected application contains Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to use user-supplied in

CVE-2021-40354 [HIGH] CWE-267 CVE-2021-40354: A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The "surrogate" functionality on the user profile of the application does not perform sufficient access control that could lead to an a

CVE-2021-40356 [HIGH] CWE-611 CVE-2021-40356: A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the applica

CVE-2021-33717 [MEDIUM] CWE-476 CVE-2021-33717: A vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization (A A vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization (All versions < V13.2.0.1). When parsing specially crafted CGM Files, a NULL pointer deference condition could cause the application to crash. The application must be restarted to restore the service. An attacker could leverage this vulnerability to cau