CVSS 7.8 · High EPSS 1,7%
Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada siemens jt2go, siemens solid edge +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.
A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll library is vulnerable to memory corruption condition while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15110)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| siemens | jt2go | Semua versi sebelum 13.2.0.7 |
| siemens | solid edge | Versi se2021 |
| siemens | solid edge | Versi se2021 maintenance_pack1 |
| siemens | solid edge | Versi se2021 maintenance_pack2 |
| siemens | solid edge | Versi se2021 maintenance_pack3 |
| siemens | solid edge | Versi se2021 maintenance_pack4 |
| siemens | solid edge | Versi se2021 maintenance_pack5 |
| siemens | solid edge | Versi se2021 maintenance_pack6 |
| siemens | solid edge | Versi se2021 maintenance_pack7 |
| siemens | solid edge | Versi se2021 maintenance_pack8 |
| siemens | solid edge | Versi se2022 |
| siemens | teamcenter visualization | Versi 13.2.0 hingga sebelum 13.2.0.7 |
| siemens | teamcenter visualization | Versi 13.3.0 hingga sebelum 13.3.0.1 |