CVE-2024-32636 | THREATINT

Assigner	siemens
Reserved	2024-04-16
Published	2024-05-14
Updated	2024-08-13

Description

A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.10), Teamcenter Visualization V2312 (All versions < V2312.0005). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

HIGH: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

HIGH: 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Product status

Default status

unknown

Any version before V2312.0005

affected

Default status

unknown

Any version before V14.2.0.12

affected

Default status

unknown

Any version before V14.3.0.10

affected

Default status

unknown

Any version before V2312.0005

affected

References

https://cert-portal.siemens.com/productcert/html/ssa-046364.html

https://cert-portal.siemens.com/productcert/html/ssa-856475.html

cve.org CVE-2024-32636

nvd.nist.gov CVE-2024-32636

Download JSON

https://cve.threatint.com/CVE/CVE-2024-32636

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.