5.5
CVE-2022-41287
- EPSS 0.04%
- Published 13.12.2022 16:15:23
- Last modified 21.11.2024 07:22:59
- Source productcert@siemens.com
- Teams watchlist Login
- Open Login
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains divide by zero vulnerability when parsing a CGM file. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Teamcenter Visualization Version >= 13.2.0 < 13.2.0.12
Siemens ≫ Teamcenter Visualization Version >= 13.3.0 < 13.3.0.8
Siemens ≫ Teamcenter Visualization Version >= 14.0 < 14.0.0.4
Siemens ≫ Teamcenter Visualization Version >= 14.1 < 14.1.0.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.128 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| productcert@siemens.com | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
CWE-369 Divide By Zero
The product divides a value by zero.