SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid
JT Open Toolkit, JT Utilities and Parasolid are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-25140US | — | — | ||
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid… | ||||
| CVE-2022-47977US | high7.8 | — | ||
A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected application contains a memory corruption vulnerabil… | ||||
| CVE-2022-47936US | high7.8 | — | ||
A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All… | ||||
references
External citations — patches, advisories, analysis.
- SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid - CSAF Versionself
- SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid - PDF Versionself
- SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid - TXT Versionself
remediations (24)
- FixedJT Open
Update to V11.2.3.0 or later version
https://support.sw.siemens.com/ - FixedJT Open
Update to V11.2.3.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.2.3.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.2.3.0 or later version
https://support.sw.siemens.com/ - FixedParasolid V34.0
Update to V34.0.252 or later version
https://support.sw.siemens.com/ - FixedParasolid V34.0
Update to V34.0.254 or later version
https://support.sw.siemens.com/ - FixedParasolid V34.1
Update to V34.1.242 or later version
https://support.sw.siemens.com/ - FixedParasolid V34.1
Update to V34.1.242 or later version
https://support.sw.siemens.com/ - FixedParasolid V35.0
Update to V35.0.170 or later version
https://support.sw.siemens.com/ - FixedParasolid V35.0
Update to V35.0.170 or later version
https://support.sw.siemens.com/ - FixedParasolid V35.1
Update to V35.1.150 or later version
https://support.sw.siemens.com/ - FixedParasolid V35.1
Update to V35.1.150 or later version
https://support.sw.siemens.com/ - WorkaroundJT Open
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundJT Open
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundJT Utilities
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundJT Utilities
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundParasolid V34.0
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundParasolid V34.0
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundParasolid V34.1
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundParasolid V34.1
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundParasolid V35.0
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundParasolid V35.0
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundParasolid V35.1
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
- WorkaroundParasolid V35.1
Do not open untrusted files using Parasolid, JT Open Toolkit or JT Utilities
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan