7.8

CVE-2022-47936

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Jt Open Toolkit Version < 11.2.3.0
Siemens ≫ Jt Utilities Version < 11.2.3.0
Siemens ≫ Parasolid Version >= 34.0 < 34.0.252
Siemens ≫ Parasolid Version >= 34.1 < 34.1.242
Siemens ≫ Parasolid Version >= 35.0 < 35.0.170
Siemens ≫ Parasolid Version >= 35.1 < 35.1.150
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.12% 0.311
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
productcert@siemens.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).