CVE-2022-41851highCWE-824

CVE-2022-41851: high-severity vulnerability in Siemens JTTK

Published · Updated

Follow this CVE+ Monitor Simcenter Femap+ Monitor JTTK

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.3%
A vulnerability has been identified in JTTK (All versions < V11.1.1.0), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The JTTK library is vulnerable to an uninitialized pointer reference vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-16973)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Siemens · JTTKSiemens · Simcenter Femap V2022.1Siemens · Simcenter Femap V2022.2
Related CVEs — Siemens JTTK

In the same product, most dangerous first.

CVE-2021-44444—CVE-2021-44444EPSS 1.1%CVE-2022-34465—CVE-2022-34465EPSS 1.0%CVE-2021-44435—CVE-2021-44435EPSS 0.9%CVE-2021-44432—CVE-2021-44432EPSS 0.9%CVE-2021-44447—CVE-2021-44447EPSS 0.9%CVE-2021-44433—CVE-2021-44433EPSS 0.9%