Stack Overflow Vulnerability in Siemens JT Open and Teamcenter Visualization Products
CVE-2024-37997
7.3HIGH
Key Information:
- Vendor
- Siemens
- Vendor
- CVE Published:
- 9 July 2024
Summary
A stack overflow vulnerability has been identified in several products from Siemens, notably within JT Open and Teamcenter Visualization. This vulnerability arises during the parsing of specially crafted XML files, which may permit an attacker to execute arbitrary code in the context of the current process. Affected applications include multiple versions of JT Open, JT2Go, PLM XML SDK, and various iterations of Teamcenter Visualization. Users are advised to update their affected products to the latest secure versions to mitigate associated risks.
Affected Version(s)
JT Open 0
JT2Go 0
PLM XML SDK 0
References
CVSS V4
Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published