Siemens JT Open, JT Utilities, and Parasolid

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2023-15541 · Jt Open +1 · Jt Open +1

Name of the Vulnerable Software and Affected Versions: JT Open versions prior to 11.2.3.0 JT Utilities versions prior to 13.2.3.0 Description: A memory corruption issue has been identified in the affected application when parsing specially crafted JT files. This could allow an attacker to execute...

PT-2023-15534 · Jt Open +2 · Jt Open +2

Name of the Vulnerable Software and Affected Versions: JT Open versions prior to 11.2.3.0 JT Utilities versions prior to 13.2.3.0 Parasolid V34.0 versions prior to 34.0.252 Parasolid V34.1 versions prior to 34.1.242 Parasolid V35.0 versions prior to 35.0.170 Parasolid V35.1 versions prior to...

Siemens JT Open, JT Utilities and Solid Edge Memory Corruption Vulnerability

JT Open Toolkit is an application programming interface API for software developers who support JT, a publicly released data format developed by Siemens Digital Industry Software and widely used for communication, visualization, digital modeling and various other purposes.Solid Edge is a portfoli...

CVE-2022-47935

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute...

Memory corruption

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute...

CVE-2022-47935

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute...

CVE-2022-47935

The CVE-2022-47935 issue affects Siemens JT Open (pre-11.1.1.0), JT Utilities (pre-13.1.1.0), and Solid Edge (pre-2023). Root cause: a memory corruption vulnerability in Jt1001.dll when parsing specially crafted JT files, enabling code execution in the attacker’s context. Affects: JT Open, JT Uti...

The vulnerability of the JT Utilities and JT Open Toolkit (JTTK) application development tools, related to buffer overflow in the stack, allows an attacker to execute arbitrary code.

The vulnerability of the JT Utilities and JT Open Toolkit JTTK application development tools is related to buffer overflows in the stack during syntax analysis of JT files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

File parsing vulnerability in JT Utilities and JTTK (CNVD-2021-100370)

JT is a publicly available data format developed by Siemens Digital Industry Software and is widely used for communication, visualization, numerical modeling, etc. The JT Utility provides a series of command line utilities that can be used to support application development and reuse of JT. The J...

File parsing vulnerability exists in JT Utilities and JTTK (CNVD-2021-100372)

JT is a publicly available data format developed by Siemens Digital Industry Software and is widely used for communication, visualization, numerical modeling, etc. The JT Utility provides a series of command line utilities that can be used to support application development and reuse of JT. The J...

File parsing vulnerability in JT Utilities and JTTK (CNVD-2021-100371)

JT is a publicly available data format developed by Siemens Digital Industry Software and is widely used for communication, visualization, numerical modeling, etc. The JT Utility provides a series of command line utilities that can be used to support application development and reuse of JT. The J...

File parsing vulnerability in JT Utilities and JTTK (CNVD-2021-100373)

JT is a publicly available data format developed by Siemens Digital Industry Software and is widely used for communication, visualization, numerical modeling, etc. The JT Utility provides a series of command line utilities that can be used to support application development and reuse of JT. The J...

CVE-2021-44434

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execu...

CVE-2021-44445

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted JT files. This could allow an attacker to execute code...

CVE-2021-44441

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code ...

CVE-2021-44436

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this...

CVE-2021-44433

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains a use after free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to...

CVE-2021-44432

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the...

CVE-2021-44431

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this...