CVE-2020-26981: Siemens JT2Go PLMXML File Parsing XML External Entity Processing Information Disclosure Vulnerability
A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). When opening a specially crafted xml file, the application could disclose arbitrary files to remote attackers. This is because of the passing of specially crafted content to the underlying XML parser without taking proper restrictions such as prohibiting an external dtd. (ZDI-CAN-11890)
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PLMXML files. Due to the improper restriction of XML External Entity (XXE) references, a crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-26981?
CVE-2020-26981 has a high severity rating due to the potential for unauthorized file disclosure.
How do I fix CVE-2020-26981?
To remediate CVE-2020-26981, upgrade to versions 13.1.0 or later of JT2Go and Teamcenter Visualization.
What applications are affected by CVE-2020-26981?
CVE-2020-26981 affects JT2Go and Teamcenter Visualization versions prior to 13.1.0.
What type of attack does CVE-2020-26981 enable?
CVE-2020-26981 allows remote attackers to disclose arbitrary files through specially crafted XML files.
Can user input trigger CVE-2020-26981?
Yes, CVE-2020-26981 can be triggered by processing specially crafted XML files passed to the application.