A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll library is vulnerable to uninitialized pointer free while parsing specially crafted CGM files. An attacker could leverage this vulnerability to execute code in the context of the current process.
References
Link | Resource |
---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-553086.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
26 May 2022, 22:43
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-553086.pdf - Patch, Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 7.8 |
First Time |
Siemens
Siemens jt2go Siemens teamcenter Visualization |
|
CWE | CWE-824 | |
CPE | cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:* |
20 May 2022, 13:43
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-05-20 13:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-29033
Mitre link : CVE-2022-29033
CVE.ORG link : CVE-2022-29033
JSON object : View
Products Affected
siemens
- jt2go
- teamcenter_visualization
CWE
CWE-824
Access of Uninitialized Pointer