Siemens Teamcenter Visualization and JT2Go

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2024-32636

Siemens JT2Go and Teamcenter Visualization are affected by CVE-2024-32636 (and related CVEs) due to an out-of-bounds read when parsing crafted X_T files. Affected products/versions include JT2Go before V2312.0005, Teamcenter Visualization V14.2 before V14.2.0.12, V14.3 before V14.3.0.10, and V231...