CVE-2024-26275: High severity siemens jt2go vulnerability
A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted XT files. This could allow an attacker to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26275?
CVE-2024-26275 is classified as a high severity vulnerability affecting multiple Siemens software products.
How do I fix CVE-2024-26275?
To mitigate CVE-2024-26275, users should upgrade to the latest versions of affected software as specified by Siemens.
Which software versions are affected by CVE-2024-26275?
CVE-2024-26275 affects Siemens JT2Go versions prior to V2312.0004 and several versions of Parasolid and Teamcenter Visualization.
What types of vulnerabilities does CVE-2024-26275 include?
CVE-2024-26275 includes vulnerabilities that could potentially allow unauthorized access or manipulation of the affected software.
Is there a CVE-2024-26275 specific patch available?
Yes, Siemens has released patches in the form of updates for the affected products to address CVE-2024-26275.