Stack Overflow Vulnerability in Siemens JT Open and Teamcenter Visualization Products
CVE-2024-37997

7.3HIGH

Key Information:

Vendor

Siemens
Status
Jt Open
Jt2go
Plm Xml Sdk
Teamcenter Visualization V14.2
Vendor
CVE Published:
9 July 2024

What is CVE-2024-37997?

A stack overflow vulnerability has been identified in several products from Siemens, notably within JT Open and Teamcenter Visualization. This vulnerability arises during the parsing of specially crafted XML files, which may permit an attacker to execute arbitrary code in the context of the current process. Affected applications include multiple versions of JT Open, JT2Go, PLM XML SDK, and various iterations of Teamcenter Visualization. Users are advised to update their affected products to the latest secure versions to mitigate associated risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

JT Open 0

JT2Go 0

PLM XML SDK 0

References

https://cert-portal.siemens.com/productcert/html/ssa-8248...
https://cert-portal.siemens.com/productcert/html/ssa-9592...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

JSON
.