Siemens Jt2go和Siemens Teamcenter Visualization 缓冲区错误漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT, VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments.The software gives business users access to documents in a...

CVE-2020-26981: Improper Restriction of XML External Entity Reference

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. When opening a specially crafted xml file, the application could disclose arbitrary files to remote attackers. This is because of the passing of specially crafted content to the...

PT-2021-11294

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0 Teamcenter Visualization versions prior to 13.1.0 Description: A vulnerability has been identified that affects the parsing of PCX files due to a lack of proper validation of user-supplied data. This could resul...

PT-2021-11281

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0 Teamcenter Visualization versions prior to 13.1.0 Description: A vulnerability has been identified that could allow remote attackers to disclose arbitrary files when opening a specially crafted xml file. This...

Siemens Jt2go 缓冲区错误漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT, VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments.The software gives business users access to documents in a...

PT-2021-11289

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.1.0.1 Solid Edge SE2020 versions prior to SE2020MP12 Solid Edge SE2021 versions prior to SE2021MP2 Teamcenter Visualization versions prior to V13.1.0.1 Description: A vulnerability has been identified in the affect...

CVE-2020-26986: Heap-based Buffer Overflow

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of JT files. This could lead to a heap-based buffer overflow. An attacker could leverage this...

CVE-2020-26993: Stack-based Buffer Overflow

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer in the fon...

CVE-2020-26991: Untrusted Pointer Dereference

A vulnerability has been identified in JT2Go All versions V13.1.0.2, Teamcenter Visualization All versions V13.1.0.2. Affected applications lack proper validation of user-supplied data when parsing ASM files. This could lead to pointer dereferences of a value obtained from untrusted source. An...

CVE-2020-26988: Out-of-bounds Write

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in an out of bounds write past the end of an allocated structure. An...

CVE-2020-26982: Out-of-bounds Write

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CG4 and CGM files. This could result in an out of bounds write past the end of an allocated structure. ...

CVE-2020-26994: Heap-based Buffer Overflow

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of PCX files. This could result in a heap-based buffer overflow. An attacker could leverage this...

CVE-2020-26992: Stack-based Buffer Overflow

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer during fon...

CVE-2020-26990: Access of Resource Using Incompatible Type

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing ASM files. A crafted ASM file could trigger a type confusion condition. An attacker could leverage...

PT-2021-11293

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0 Teamcenter Visualization versions prior to 13.1.0 Description: A vulnerability has been identified due to the lack of proper validation of user-supplied data when parsing CGM files. This could lead to a...

PT-2021-11284

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.1.0 Teamcenter Visualization versions prior to V13.1.0 Description: A vulnerability has been identified in the affected applications, where they lack proper validation of user-supplied data when parsing JT files...

Siemens JT2Go and Teamcenter Visualization (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: JT2Go and Teamcenter Visualization --------- Begin Update B Part 1 of 2 --------- Vulnerabilities: Type Confusion, Improper Restriction of XML External Entity Reference, Out-of-Bounds Write,...

PT-2021-11298

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0.2 Teamcenter Visualization versions prior to 13.1.0.2 Description: A vulnerability has been identified in the affected applications, where they lack proper validation of user-supplied data when parsing PAR files...

PT-2021-11286

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0 Teamcenter Visualization versions prior to 13.1.0 Description: A vulnerability has been identified in the affected applications, where they lack proper validation of user-supplied data when parsing JT files. Thi...

PT-2021-11283

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0 Teamcenter Visualization versions prior to 13.1.0 Description: A vulnerability has been identified in the affected applications, where they lack proper validation of user-supplied data when parsing PDF files. Th...