CVE-2024-37997

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-37997
A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a stack based overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-824889.html
https://cert-portal.siemens.com/productcert/html/ssa-959281.html
https://cert-portal.siemens.com/productcert/html/ssa-824889.html
Configurations

No configuration.

History

21 Nov 2024, 09:24

Type Values Removed Values Added
References () https://cert-portal.siemens.com/productcert/html/ssa-824889.html - () https://cert-portal.siemens.com/productcert/html/ssa-824889.html -

08 Oct 2024, 09:15

Type Values Removed Values Added
Summary
  • (es) Se ha identificado una vulnerabilidad en JT Open (todas las versiones &lt; V11.5), PLM XML SDK (todas las versiones &lt; V7.1.0.014). Las aplicaciones afectadas contienen una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria al analizar archivos XML especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual.
Summary (en) A vulnerability has been identified in JT Open (All versions < V11.5), PLM XML SDK (All versions < V7.1.0.014). The affected applications contain a stack based overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process. (en) A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a stack based overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-959281.html -

09 Jul 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-09 12:15

Updated : 2024-11-21 09:24

NVD link : CVE-2024-37997

Mitre link : CVE-2024-37997

CVE.ORG link : CVE-2024-37997

JSON object : View

Products Affected

No product.

CWE
CWE-121

Stack-based Buffer Overflow