Siemens JTTK and JT Utilities

🗓️ 14 Dec 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 26 Views

Siemens JTTK and JT Utilities are prone to out-of-bounds write/read vulnerabilities. Exploitation may lead to application crashes or arbitrary code execution. Devices should be updated to JT Utilities v12.8.1.1 or later and JTTK v10.8.1.1 or later to mitigate the risk

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2021-44449	14 Dec 202114:13	–	circl
CNNVD	Siemens JT Utilities 缓冲区错误漏洞	14 Dec 202100:00	–	cnnvd
CNNVD	Siemens JT Utilities 缓冲区错误漏洞	14 Dec 202100:00	–	cnnvd
CNVD	File parsing vulnerability in JT Utilities and JTTK (CNVD-2021-100370)	16 Dec 202100:00	–	cnvd
CNVD	File parsing vulnerability in JT Utilities and JTTK (CNVD-2021-100371)	16 Dec 202100:00	–	cnvd
CVE	CVE-2021-44449	14 Dec 202112:07	–	cve
CVE	CVE-2021-44450	14 Dec 202112:07	–	cve
Cvelist	CVE-2021-44449	14 Dec 202112:07	–	cvelist
Cvelist	CVE-2021-44450	14 Dec 202112:07	–	cvelist
EUVD	EUVD-2021-31289	3 Oct 202520:07	–	euvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-396621.json
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-396621.txt
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-396621.pdf
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-350-20.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-350-20
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

14 Dec 2021 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 26.8

CVSS 3.17.8

EPSS0.00418