7.8
CVE-2024-34085
- EPSS 0.19%
- Veröffentlicht 14.05.2024 16:17:22
- Zuletzt bearbeitet 03.10.2025 19:54:59
- Quelle productcert@siemens.com
- CVE-Watchlists
- Unerledigt
A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization V14.2 (All versions < V14.2.0.10), Teamcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization V2312 (All versions < V2312.0001). The affected applications contain a stack overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Teamcenter Visualization Version >= 14.1 < 14.1.0.13
Siemens ≫ Teamcenter Visualization Version >= 14.2 < 14.2.0.10
Siemens ≫ Teamcenter Visualization Version >= 14.3 < 14.3.0.7
Siemens ≫ Teamcenter Visualization Version >= 2312.0 < 2312.0001
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.19% | 0.406 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| productcert@siemens.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-121 Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).