First published: Tue May 10 2022(Updated: )
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Credit: productcert@siemens.com
Affected Software | Affected Version | How to fix |
---|---|---|
Siemens JT2Go | <13.3.0.3 | |
Siemens Teamcenter Visualization | >=13.3<13.3.0.3 | |
Siemens Teamcenter Visualization | >=14.0<14.0.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this security issue is CVE-2022-29029.
The severity of CVE-2022-29029 is medium with a severity score of 5.5.
JT2Go versions earlier than V13.3.0.3, Teamcenter Visualization V13.3 versions earlier than V13.3.0.3, and Teamcenter Visualization V14.0 versions earlier than V14.0.0.1 are affected by CVE-2022-29029.
The vulnerability in the CGM_NIST_Loader.dll is a null pointer dereference vulnerability.
Yes, you can find the fix for CVE-2022-29029 in the official Siemens advisory linked in the references.