Lucene search
IcscertCVE-2022-3161HistoryJan 13, 2023 - 1:15 a.m.
CVE-2022-3161
2023-01-1301:15:09
CWE-119
CWE-787
icscert
web.nvd.nist.gov
33
apdfl.dll
memory corruption
vulnerability
pdf files
code execution
nvd
cve-2022-3161
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
EPSS
0.001
Percentile
36.7%
The APDFL.dll contains a memory corruption vulnerability while parsing
specially crafted PDF files. This could allow an attacker to execute
code in the context of the current process.
Affected configurations
Node
siemensjt2goRange<14.1.0.5
ORsiemensteamcenter_visualizationRange13.3.0–13.3.0.8
ORsiemensteamcenter_visualizationRange14.0–14.0.0.4
ORsiemensteamcenter_visualizationRange14.1–14.1.0.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | jt2go | * | cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:* |
| siemens | teamcenter_visualization | * | cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "JT2Go",
"vendor": "Siemens ",
"versions": [
{
"lessThan": "14.1.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Teamcenter Visualization V13.3",
"vendor": "Siemens ",
"versions": [
{
"lessThan": "13.3.0.8",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Teamcenter Visualization V14.0",
"vendor": "Siemens ",
"versions": [
{
"lessThan": "14.0.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Teamcenter Visualization V14.1",
"vendor": "Siemens ",
"versions": [
{
"lessThan": "14.1.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
cnvd
cnvd
Siemens Teamcenter Visualization and JT2Go Memory Corruption Vulnerability
2022-12-14 00:00:00
prion
prion
Memory corruption
2023-01-13 01:15:00
cvelist
cvelist
CVE-2022-3161
2023-01-13 00:17:06
nvd
nvd
CVE-2022-3161
2023-01-13 01:15:09
ics
ics
Siemens Teamcenter Visualization and JT2Go
2022-12-15 12:00:00
nessus
nessus
Siemens JT2Go < 14.1.0.5 Multiple Vulnerabilities (SSA-360681)
2022-12-15 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
EPSS
0.001
Percentile
36.7%
Related for CVE-2022-3161