CVE-2022-47936

2023-02-1411:15:14

CWE-121

[email protected]

web.nvd.nist.gov

cve-2022-47936

vulnerability

jt open

jt utilities

parasolid

stack overflow

code execution

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

45.3%

JSON

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

Affected configurations

NVD

Node

siemensjt_open_toolkitRange<11.2.3.0

siemensjt_utilitiesRange<11.2.3.0

siemensparasolidRange34.0–34.0.252

siemensparasolidRange34.1–34.1.242

siemensparasolidRange35.0–35.0.170

siemensparasolidRange35.1–35.1.150

CPENameOperatorVersion
siemens:jt_open_toolkitsiemens jt open toolkitlt11.2.3.0
siemens:jt_utilitiessiemens jt utilitieslt11.2.3.0
siemens:parasolidsiemens parasolidlt34.0.252
siemens:parasolidsiemens parasolidlt34.1.242
siemens:parasolidsiemens parasolidlt35.0.170
siemens:parasolidsiemens parasolidlt35.1.150

CPE	Name	Operator	Version
siemens:jt_open_toolkit	siemens jt open toolkit	lt	11.2.3.0
siemens:jt_utilities	siemens jt utilities	lt	11.2.3.0
siemens:parasolid	siemens parasolid	lt	34.0.252
siemens:parasolid	siemens parasolid	lt	34.1.242
siemens:parasolid	siemens parasolid	lt	35.0.170
siemens:parasolid	siemens parasolid	lt	35.1.150

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "JT Open",
    "versions": [
      {
        "version": "All versions < V11.2.3.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "JT Utilities",
    "versions": [
      {
        "version": "All versions < V13.2.3.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Parasolid V34.0",
    "versions": [
      {
        "version": "All versions < V34.0.252",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Parasolid V34.1",
    "versions": [
      {
        "version": "All versions < V34.1.242",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Parasolid V35.0",
    "versions": [
      {
        "version": "All versions < V35.0.170",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Parasolid V35.1",
    "versions": [
      {
        "version": "All versions < V35.1.150",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]