SSA-301589: Multiple File Parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization
Siemens has released updates for JT2Go, Solid Edge and Teamcenter Visualization to fix multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as PDF, DXF or PAR) with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for some of the affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not yet available.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-38405US | high7.8 | — | ||
The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulne… | ||||
| CVE-2021-44018US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visu… | ||||
| CVE-2021-44016US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visu… | ||||
| CVE-2021-44000US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visu… | ||||
| CVE-2021-43336US | high7.8 | — | ||
An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of D… | ||||
references
External citations — patches, advisories, analysis.
- SSA-301589: Multiple File Parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - CSAF Versionself
- SSA-301589: Multiple File Parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - PDF Versionself
- SSA-301589: Multiple File Parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization - TXT Versionself
remediations (56)
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationSolid Edge SE2021
Avoid to open untrusted files from unknown sources in affected products
- MitigationSolid Edge SE2021
Avoid to open untrusted files from unknown sources in affected products
- MitigationSolid Edge SE2021
Avoid to open untrusted files from unknown sources in affected products
- MitigationSolid Edge SE2022
Avoid to open untrusted files from unknown sources in affected products
- MitigationSolid Edge SE2022
Avoid to open untrusted files from unknown sources in affected products
- MitigationSolid Edge SE2022
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V12.4
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V12.4
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.1
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.1
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.1
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.1
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.1
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.2
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- FixedJT2Go
Update to V13.2.0.7 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedJT2Go
Update to V13.2.0.7 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedJT2Go
Update to V13.2.0.7 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedJT2Go
Update to V13.2.0.7 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedJT2Go
Update to V13.2.0.7 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - FixedSolid Edge SE2021
Update to SE2021MP9 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2021
Update to SE2021MP9 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2021
Update to SE2021MP9 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2022
Update to SE2022MP1 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2022
Update to SE2022MP1 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2022
Update to SE2022MP1 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V12.4
Update to V12.4.0.13 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V12.4
Update to V12.4.0.13 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.1
Update to V13.1.0.8 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.1
Update to V13.1.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.1
Update to V13.1.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.1
Update to V13.1.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.1
Update to V13.1.0.9 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.7 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.7 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.7 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.7 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.2
Update to V13.2.0.7 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.3
Update to V13.3.0.1 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.3
Update to V13.3.0.1 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.3
Update to V13.3.0.1 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.3
Update to V13.3.0.1 or later version
https://support.sw.siemens.com/ - FixedTeamcenter Visualization V13.3
Update to V13.3.0.1 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan