Lucene search

K
cvelistSiemensCVELIST:CVE-2020-26984
HistoryJan 12, 2021 - 8:18 p.m.

CVE-2020-26984

2021-01-1220:18:34
CWE-787
siemens
www.cve.org
8
vulnerability
jt2go
teamcenter
validation
user-supplied data
parsing
jt files
out of bounds write
code execution
current process

EPSS

0.003

Percentile

68.9%

A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of JT files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11972)

CNA Affected

[
  {
    "product": "JT2Go",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.1.0"
      }
    ]
  },
  {
    "product": "Teamcenter Visualization",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.1.0"
      }
    ]
  }
]

EPSS

0.003

Percentile

68.9%

Related for CVELIST:CVE-2020-26984