CVE-2024-26276

A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/html/ssa-222019.html
https://cert-portal.siemens.com/productcert/html/ssa-771940.html
https://cert-portal.siemens.com/productcert/html/ssa-222019.html
https://cert-portal.siemens.com/productcert/html/ssa-771940.html

Configurations

No configuration.

History

21 Nov 2024, 09:02

Type	Values Removed	Values Added
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-222019.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-222019.html -
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-771940.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-771940.html -

13 Aug 2024, 08:15

Type	Values Removed	Values Added
Summary		(es) Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V2312.0004), Parasolid V35.1 (Todas las versiones < V35.1.254), Parasolid V36.0 (Todas las versiones < V36.0.207), Parasolid V36.1 (Todas las versiones < V36.1.147), Teamcenter Visualization V14.2 (todas las versiones), Teamcenter Visualization V14.3 (todas las versiones < V14.3.0.9), Teamcenter Visualization V2312 (todas las versiones < V2312.0004). La aplicación afectada contiene una vulnerabilidad de agotamiento de pila mientras analiza un archivo X_T especialmente manipulado. Esto podría permitir que un atacante provoque una condición de denegación de servicio.
Summary	(en) A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition.	(en) A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition.

11 Jun 2024, 12:15

Type	Values Removed	Values Added
Summary	(en) A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition.	(en) A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition.
References		() https://cert-portal.siemens.com/productcert/html/ssa-771940.html -

09 Apr 2024, 09:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-04-09 09:15

Updated : 2024-11-21 09:02

NVD link : CVE-2024-26276

Mitre link : CVE-2024-26276

CVE.ORG link : CVE-2024-26276

JSON object : View

Products Affected

No product.

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

3.3 /10