Siemens JT2Go
view advisory published 2024-10-08
Siemens JT2Go is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in PDF format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for JT2Go and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41902US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V2406.0003). The affected application contains a stack-based buffer overflow vulnerability that could be triggered whil… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 - CSAF Versionself
- SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 - HTML Versionself
- ICS Advisory ICSA-24-284-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-284-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationJT2Go
Do not open untrusted PDF files in affected applications
- FixedJT2Go
Update to V2406.0003 or later version
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan