Out of Bounds Read Vulnerability in JT2Go and Teamcenter Visualization by Siemens
CVE-2022-45484

3.3LOW

Key Information:

Vendor
Siemens
Status
Jt2go
Teamcenter Visualization V13.2
Teamcenter Visualization V13.3
Teamcenter Visualization V14.0
Vendor
CVE Published:
13 December 2022

Summary

An out of bounds read vulnerability has been identified in the CCITT_G4Decode.dll component of JT2Go and multiple versions of Teamcenter Visualization. This flaw occurs when the software incorrectly parses RAS files, allowing potential attackers to execute arbitrary code within the context of the current process. As such, it can lead to significant security risks for users operating vulnerable versions of the affected software.

Affected Version(s)

JT2Go All versions < V14.1.0.6

Teamcenter Visualization V13.2 All versions < V13.2.0.12

Teamcenter Visualization V13.3 All versions < V13.3.0.9

References

https://cert-portal.siemens.com/productcert/pdf/ssa-70005...

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.