CVE-2021-44002highCWE-787

CVE-2021-44002: high-severity vulnerability in Siemens JT Open

Published · Updated

Follow this CVE+ Monitor JT Utilities+ Monitor Solid Edge

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 1.6%
A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15058, ZDI-CAN-19076, ZDI-CAN-19077)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected products
Siemens · JT OpenSiemens · JT UtilitiesSiemens · Solid Edge
Related CVEs — Siemens JT Open

In the same product, most dangerous first.

CVE-2021-44014HIGHCVE-2021-44014EPSS 1.6%CVE-2021-44444—CVE-2021-44444EPSS 1.1%CVE-2021-44435—CVE-2021-44435EPSS 0.9%CVE-2021-44432—CVE-2021-44432EPSS 0.9%CVE-2021-44447—CVE-2021-44447EPSS 0.9%CVE-2021-44433—CVE-2021-44433EPSS 0.9%