Lucene search

[email protected]CVE-2021-33738

HistoryAug 10, 2021 - 11:15 a.m.

CVE-2021-33738

2021-08-1011:15:09

CWE-125

[email protected]

web.nvd.nist.gov

cve-2021-33738

vulnerability

jt2go

teamcenter visualization

plmxmladapterse70.dll

out of bounds read

information leak

security advisory

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

3.6 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

A vulnerability has been identified in JT2Go (All versions < V13.2.0.2), Teamcenter Visualization (All versions < V13.2.0.2). The plmxmlAdapterSE70.dll library in affected applications lacks proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13405)

Affected configurations

NVD

Node

siemensjt2goRange<13.2.0.2

siemensteamcenter_visualizationRange<13.2.0.2

CPENameOperatorVersion
siemens:jt2gosiemens jt2golt13.2.0.2
siemens:teamcenter_visualizationsiemens teamcenter visualizationlt13.2.0.2

CPE	Name	Operator	Version
siemens:jt2go	siemens jt2go	lt	13.2.0.2
siemens:teamcenter_visualization	siemens teamcenter visualization	lt	13.2.0.2

CNA Affected

[
  {
    "product": "JT2Go",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.2.0.2"
      }
    ]
  },
  {
    "product": "Teamcenter Visualization",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.2.0.2"
      }
    ]
  }
]