First published: Tue May 10 2022(Updated: )
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The Mono_Loader.dll library is vulnerable to integer overflow condition while parsing specially crafted TG4 files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Credit: productcert@siemens.com
Affected Software | Affected Version | How to fix |
---|---|---|
Siemens JT2Go | <13.3.0.3 | |
Siemens Teamcenter Visualization | >=13.3<13.3.0.3 | |
Siemens Teamcenter Visualization | >=14.0<14.0.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2022-29030.
The severity of CVE-2022-29030 is medium, with a severity value of 5.5.
JT2Go versions prior to V13.3.0.3, Teamcenter Visualization V13.3 versions prior to V13.3.0.3, and Teamcenter Visualization V14.0 versions prior to V14.0.0.1 are affected by CVE-2022-29030.
The vulnerability in Mono_Loader.dll library is an integer overflow condition while parsing specially crafted TG4 files.
To fix CVE-2022-29030, it is recommended to update JT2Go to V13.3.0.3, Teamcenter Visualization V13.3 to V13.3.0.3, and Teamcenter Visualization V14.0 to V14.0.0.1 or later versions.