CVE-2022-41288

2022-12-1316:15:23

CWE-770

[email protected]

web.nvd.nist.gov

vulnerability

jt2go

teamcenter visualization

cgm file

stack exhaustion

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

20.7%

JSON

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains stack exhaustion vulnerability when parsing a CGM file. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Affected configurations

Nvd

Node

siemensjt2goMatch-

siemensteamcenter_visualizationRange13.2.0–13.2.0.12

siemensteamcenter_visualizationRange13.3.0–13.3.0.8

siemensteamcenter_visualizationRange14.0–14.0.0.4

siemensteamcenter_visualizationRange14.1–14.1.0.6

VendorProductVersionCPE
siemensjt2go-cpe:2.3:a:siemens:jt2go:-:*:*:*:*:*:*:*
siemensteamcenter_visualization*cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*