Lucene search

IcscertCVELIST:CVE-2022-2069

HistoryOct 20, 2022 - 12:00 a.m.

CVE-2022-2069 Datalogics APDFL library Heap-based Buffer Overflow

2022-10-2000:00:00

CWE-122

icscert

www.cve.org

siemens

jt2go

teamcenter visualization

apdfl.dll

buffer overflow

out of bounds write

pdf files

code execution

heap-based buffer

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

29.4%

JSON

The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "JT2Go",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "V13.3.0.5",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "Teamcenter Visualization V13.3",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "V13.3.0.5",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "Teamcenter Visualization V14.0",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "V14.0.0.2",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-829738.pdf

www.cisa.gov/uscert/ics/advisories/icsa-22-195-07

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

29.4%

JSON

Related for CVELIST:CVE-2022-2069