SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities
JT Open Toolkit and JT Utilities are affected by a memory corruption vulnerability that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-29053US | — | — | ||
A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The affected applications contain an out of bounds read past the… | ||||
references
External citations — patches, advisories, analysis.
- SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities - CSAF Versionself
- SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities - HTML Versionself
- SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities - PDF Versionself
- SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities - TXT Versionself
remediations (4)
- FixedJT Open
Update to V11.3.2.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.3.0.0 or later version
https://support.sw.siemens.com/ - WorkaroundJT Open
Do not open untrusted files using JT Open Toolkit or JT Utilities
- WorkaroundJT Utilities
Do not open untrusted files using JT Open Toolkit or JT Utilities
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan