CVE-2021-44434

2021-12-1412:06:56

CWE-787

siemens

www.cve.org

0.001 Low

EPSS

Percentile

25.4%

JSON

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14902, ZDI-CAN-14866)

CNA Affected

[
  {
    "product": "JT Utilities",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.1.1.0"
      }
    ]
  },
  {
    "product": "JTTK",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions <  V11.1.1.0"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf

0.001 Low

EPSS

Percentile

25.4%

JSON

Related for CVELIST:CVE-2021-44434