CVE-2021-44018
Summary
| CVE | CVE-2021-44018 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-02-09 16:15:00 UTC |
| Updated | 2022-06-14 10:15:00 UTC |
| Description | A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll library is vulnerable to memory corruption condition while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15112) |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Siemens | Jt2go | All | All | All | All |
| Application | Siemens | Solid Edge | se2021 | - | All | All |
| Application | Siemens | Solid Edge | se2021 | maintenance_pack1 | All | All |
| Application | Siemens | Solid Edge | se2021 | maintenance_pack2 | All | All |
| Application | Siemens | Solid Edge | se2021 | maintenance_pack3 | All | All |
| Application | Siemens | Solid Edge | se2021 | maintenance_pack4 | All | All |
| Application | Siemens | Solid Edge | se2021 | maintenance_pack5 | All | All |
| Application | Siemens | Solid Edge | se2021 | maintenance_pack6 | All | All |
| Application | Siemens | Solid Edge | se2021 | maintenance_pack7 | All | All |
| Application | Siemens | Solid Edge | se2021 | maintenance_pack8 | All | All |
| Application | Siemens | Solid Edge | se2022 | - | All | All |
| Application | Siemens | Teamcenter Visualization | All | All | All | All |
| Application | Siemens | Teamcenter Visualization | 12.4.0 | All | All | All |
| Application | Siemens | Teamcenter Visualization | 13.1.0 | All | All | All |
| Application | Siemens | Teamcenter Visualization | 13.2.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ZDI-22-340 | Zero Day Initiative | MISC | www.zerodayinitiative.com | Vendor Advisory |
| cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf | MISC | cert-portal.siemens.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 590790 Siemens Solid Edge and JT2Go Multiple Vulnerabilities (ICSA-22-041-07)