CVE-2024-32637

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-32637
A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.10), Teamcenter Visualization V2312 (All versions < V2312.0005). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted X_T files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-046364.html
https://cert-portal.siemens.com/productcert/html/ssa-856475.html
Configurations

No configuration.

History

13 Aug 2024, 08:15

Type Values Removed Values Added
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-856475.html -
Summary
  • (es) Se ha identificado una vulnerabilidad en Parasolid V35.1 (Todas las versiones &lt; V35.1.256), Parasolid V36.0 (Todas las versiones &lt; V36.0.208), Parasolid V36.1 (Todas las versiones &lt; V36.1.173). Las aplicaciones afectadas contienen una vulnerabilidad de desreferencia de puntero nulo al analizar archivos X_T especialmente manipulados. Un atacante podría aprovechar esta vulnerabilidad para bloquear la aplicación y provocar una condición de denegación de servicio.
Summary (en) A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.256), Parasolid V36.0 (All versions < V36.0.208), Parasolid V36.1 (All versions < V36.1.173). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted X_T files. An attacker could leverage this vulnerability to crash the application causing denial of service condition. (en) A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.10), Teamcenter Visualization V2312 (All versions < V2312.0005). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted X_T files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

14 May 2024, 16:17

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 16:17

Updated : 2024-08-13 08:15

NVD link : CVE-2024-32637

Mitre link : CVE-2024-32637

CVE.ORG link : CVE-2024-32637

JSON object : View

Products Affected

No product.

CWE
CWE-476

NULL Pointer Dereference