CVE-2021-44450CWE-125

CVE-2021-44450: vulnerability in Siemens JT Utilities

Published · Updated

Follow this CVE+ Monitor JT Utilities+ Monitor JTTK

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15055, ZDI-CAN-14915, ZDI-CAN-14865)
Affected products
Siemens · JTTKSiemens · JT Utilities
Related CVEs — Siemens JT Utilities

In the same product, most dangerous first.

CVE-2021-44014HIGHCVE-2021-44014EPSS 1.6%CVE-2021-44002HIGHCVE-2021-44002EPSS 1.6%CVE-2021-44444—CVE-2021-44444EPSS 1.1%CVE-2021-44435—CVE-2021-44435EPSS 0.9%CVE-2021-44432—CVE-2021-44432EPSS 0.9%CVE-2021-44447—CVE-2021-44447EPSS 0.9%