SSA-611756: JT File Parsing Vulnerability in JTTK and Simcenter Femap
JT Open Toolkit (JTTK) and Simcenter Femap are affected by an uninitialized pointer reference vulnerability that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-41851US | high7.8 | — | ||
A vulnerability has been identified in JTTK (All versions < V11.1.1.0), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- BehobenJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap V2022.1
Update to V2022.1.3 or later version
https://support.sw.siemens.com/ - BehobenSimcenter Femap V2022.2
Update to V2022.2.2 or later version
https://support.sw.siemens.com/ - WorkaroundJTTK
Do not open untrusted files using JTTK or Simcenter Femap
- WorkaroundSimcenter Femap V2022.1
Do not open untrusted files using JTTK or Simcenter Femap
- WorkaroundSimcenter Femap V2022.2
Do not open untrusted files using JTTK or Simcenter Femap
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan