CVE-2024-37997
Description
A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a stack based overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.
How to fix
- Siemens JT2GoV2406.0003 or later
- Siemens JT OpenV11.5 or later
- Siemens PLM XML SDKV7.1.0.014 or later
- Siemens Teamcenter Visualization V14.2V14.2.0.13 or later
- Siemens Teamcenter Visualization V14.3V14.3.0.11 or later
- Siemens Teamcenter Visualization V2312V2312.0008 or later
- Siemens Teamcenter Visualization V2406V2406.0003 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens JT2Go | v < V2406.0003 | V2406.0003 |
| Siemens JT Open | v < V11.5 | V11.5 |
| Siemens PLM XML SDK | v < V7.1.0.014 | V7.1.0.014 |
| Siemens Teamcenter Visualization V14.2 | v < V14.2.0.13 | V14.2.0.13 |
| Siemens Teamcenter Visualization V14.3 | v < V14.3.0.11 | V14.3.0.11 |
| Siemens Teamcenter Visualization V2312 | v < V2312.0008 | V2312.0008 |
| Siemens Teamcenter Visualization V2406 | v < V2406.0003 | V2406.0003 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.