CVE-2021-44449CWE-787

CVE-2021-44449: vulnerability in Siemens JT Utilities

Published · Updated

Follow this CVE+ Monitor JT Utilities+ Monitor JTTK

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14830)
Affected products
Siemens · JTTKSiemens · JT Utilities
Related CVEs — Siemens JT Utilities

In the same product, most dangerous first.

CVE-2021-44014HIGHCVE-2021-44014EPSS 1.6%CVE-2021-44002HIGHCVE-2021-44002EPSS 1.6%CVE-2021-44444—CVE-2021-44444EPSS 1.1%CVE-2021-44435—CVE-2021-44435EPSS 0.9%CVE-2021-44432—CVE-2021-44432EPSS 0.9%CVE-2021-44447—CVE-2021-44447EPSS 0.9%