SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge
JT Open Toolkit, JT Utilities and Solid Edge are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-47935US | high7.8 | — | ||
A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains a mem… | ||||
| CVE-2021-44014US | high7.8 | — | ||
A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains a use… | ||||
| CVE-2021-44002US | high7.8 | — | ||
A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains an ou… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge - CSAF Versionself
- SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge - PDF Versionself
- SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge - TXT Versionself
Behebungen (18)
- BehobenJT Open
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - BehobenJT Open
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - BehobenJT Open
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - BehobenJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - BehobenJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - BehobenJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge
Update to V2023 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge
Update to V2023 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge
Update to V2023 or later version
https://support.sw.siemens.com/ - WorkaroundJT Open
Do not open untrusted files using Solid Edge, JT Open Toolkit or JT Utilities
- WorkaroundJT Open
Do not open untrusted files using Solid Edge, JT Open Toolkit or JT Utilities
- WorkaroundJT Open
Do not open untrusted files using Solid Edge, JT Open Toolkit or JT Utilities
- WorkaroundJT Utilities
Do not open untrusted files using Solid Edge, JT Open Toolkit or JT Utilities
- WorkaroundJT Utilities
Do not open untrusted files using Solid Edge, JT Open Toolkit or JT Utilities
- WorkaroundJT Utilities
Do not open untrusted files using Solid Edge, JT Open Toolkit or JT Utilities
- WorkaroundSolid Edge
Do not open untrusted files using Solid Edge, JT Open Toolkit or JT Utilities
- WorkaroundSolid Edge
Do not open untrusted files using Solid Edge, JT Open Toolkit or JT Utilities
- WorkaroundSolid Edge
Do not open untrusted files using Solid Edge, JT Open Toolkit or JT Utilities
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan