CVE-2021-44442CWE-122

CVE-2021-44442: vulnerability in Siemens JT Utilities

Published · Updated

Follow this CVE+ Monitor JT Utilities+ Monitor JTTK

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14995)
Affected products
Siemens · JTTKSiemens · JT Utilities
Related CVEs — Siemens JT Utilities

In the same product, most dangerous first.

CVE-2021-44014HIGHCVE-2021-44014EPSS 1.6%CVE-2021-44002HIGHCVE-2021-44002EPSS 1.6%CVE-2021-44444—CVE-2021-44444EPSS 1.1%CVE-2021-44435—CVE-2021-44435EPSS 0.9%CVE-2021-44432—CVE-2021-44432EPSS 0.9%CVE-2021-44447—CVE-2021-44447EPSS 0.9%