CVE-2024-37996

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-37996
A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted XML files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-824889.html
https://cert-portal.siemens.com/productcert/html/ssa-959281.html
https://cert-portal.siemens.com/productcert/html/ssa-824889.html
Configurations

No configuration.

History

21 Nov 2024, 09:24

Type Values Removed Values Added
References () https://cert-portal.siemens.com/productcert/html/ssa-824889.html - () https://cert-portal.siemens.com/productcert/html/ssa-824889.html -

08 Oct 2024, 09:15

Type Values Removed Values Added
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-959281.html -
Summary
  • (es) Se ha identificado una vulnerabilidad en JT Open (todas las versiones &lt; V11.5), PLM XML SDK (todas las versiones &lt; V7.1.0.014). Las aplicaciones afectadas contienen una vulnerabilidad de desreferencia de puntero nulo al analizar archivos XML especialmente manipulados. Un atacante podría aprovechar esta vulnerabilidad para bloquear la aplicación y provocar una condición de denegación de servicio.
Summary (en) A vulnerability has been identified in JT Open (All versions < V11.5), PLM XML SDK (All versions < V7.1.0.014). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted XML files. An attacker could leverage this vulnerability to crash the application causing denial of service condition. (en) A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted XML files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

09 Jul 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-09 12:15

Updated : 2024-11-21 09:24

NVD link : CVE-2024-37996

Mitre link : CVE-2024-37996

CVE.ORG link : CVE-2024-37996

JSON object : View

Products Affected

No product.

CWE
CWE-476

NULL Pointer Dereference