CVE-2021-38405highCWE-119

CVE-2021-38405: high-severity vulnerability in Siemens JT2Go

Siemens Solid Edge, JT2Go, and Teamcenter Visualization Improper Restriction of Operations within the Bounds of a Memory Buffer

Published · Updated

Follow this CVE+ Monitor Teamcenter Visualization+ Monitor JT2Go

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 1.3%
The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Siemens · JT2GoSiemens · Teamcenter Visualization
Related CVEs — Siemens JT2Go

In the same product, most dangerous first.

CVE-2020-26987—CVE-2020-26987EPSS 4.5%CVE-2020-26985—CVE-2020-26985EPSS 4.5%CVE-2020-26991—CVE-2020-26991EPSS 4.2%CVE-2020-26990—CVE-2020-26990EPSS 4.1%CVE-2020-26995—CVE-2020-26995EPSS 3.6%CVE-2020-28383—CVE-2020-28383EPSS 3.6%