Lucene search

K
cvelistSiemensCVELIST:CVE-2022-29033
HistoryMay 10, 2022 - 9:47 a.m.

CVE-2022-29033

2022-05-1009:47:12
CWE-824
siemens
www.cve.org
7
vulnerability
jt2go
teamcenter visualization

EPSS

0.001

Percentile

21.4%

A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll library is vulnerable to uninitialized pointer free while parsing specially crafted CGM files. An attacker could leverage this vulnerability to execute code in the context of the current process.

CNA Affected

[
  {
    "product": "JT2Go",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.3.0.3"
      }
    ]
  },
  {
    "product": "Teamcenter Visualization V13.3",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.3.0.3"
      }
    ]
  },
  {
    "product": "Teamcenter Visualization V14.0",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V14.0.0.1"
      }
    ]
  }
]

EPSS

0.001

Percentile

21.4%

Related for CVELIST:CVE-2022-29033