SSA-553086: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization
Siemens has released updates for JT2Go and Teamcenter Visualization to fix multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as CGM, TIFF or TG4) with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for some of the affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not yet available.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-29033US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V… | ||||
| CVE-2022-29032US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V… | ||||
| CVE-2022-29031US | medium5.5 | — | ||
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V… | ||||
| CVE-2022-29030US | medium5.5 | — | ||
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V… | ||||
| CVE-2022-29029US | medium5.5 | — | ||
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V… | ||||
| CVE-2022-29028US | medium5.5 | — | ||
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-553086: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization - CSAF Versionself
- SSA-553086: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization - PDF Versionself
- SSA-553086: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization - TXT Versionself
Behebungen (36)
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationJT2Go
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V13.3
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in affected products
- MitigationTeamcenter Visualization V14.0
Avoid to open untrusted files from unknown sources in affected products
- BehobenJT2Go
Update to V13.3.0.3 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V13.3.0.3 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V13.3.0.3 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V13.3.0.3 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V13.3.0.3 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V13.3.0.3 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.1 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.1 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan