3.3
Low
CVE-2024-26276 A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254),…
Description
A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JT2Go 2312.0004 | earliest → < 2312.0004 | 2312.0004 |
| Parasolid V35.1 35.1 | earliest → < 35.1.254 | 35.1.254 |
| Parasolid V36.0 36.0 | earliest → < 36.0.207 | 36.0.207 |
| Parasolid V36.1 36.1 | earliest → < 36.1.147 | 36.1.147 |
| Teamcenter Visualization V14.2 14.2 | earliest → < 14.2.0.12 | 14.2.0.12 |
| Teamcenter Visualization V14.3 14.3 | earliest → < 14.3.0.9 | 14.3.0.9 |
| Teamcenter Visualization V2312 2312.0004 | earliest → < 2312.0004 | 2312.0004 |
| parasolid 36.1 | 36.1 → < 36.1.147 | 36.1.147 |
References
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of JT2Go
The 153 CVEs of JT2Go →
CVE-2024-41902
A vulnerability has been identified in JT2Go (All versions < V2406.0003)
7.8
High
CVE-2023-7066
The affected applications contain an out of bounds read past the end of an allocated structure while parsing…
7.8
High
CVE-2024-37997
A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK…
7.8
High
CVE-2024-37996
A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK…
3.3
Low