SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0
Siemens has released version V13.0.2.0 for JT Utilities to fix multiple vulnerabilities that could be triggered when reading JT files. Siemens recommends to update to the latest version, which contains solutions to all the vulnerabilities listed in this advisory. Standing recommendation is to avoid opening of untrusted files from unknown sources in the affected product, as this generally mitigates the risk of exploitation of this class of vulnerabilities for any product release.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33715US | medium5.5 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a race condition could cause an object to be released befor… | ||||
| CVE-2021-33714US | medium5.5 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a missing check for the validity of an iterator leads to NU… | ||||
| CVE-2021-33713US | medium5.5 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a hash function is called with an incorrect argument leadin… | ||||
references
External citations — patches, advisories, analysis.
- SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 - CSAF Versionself
- SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 - PDF Versionself
- SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 - TXT Versionself
remediations (6)
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- FixedJT Utilities
Update to V13.0.2.0 or later version
- FixedJT Utilities
Update to V13.0.2.0 or later version
- FixedJT Utilities
Update to V13.0.2.0 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan