« Volver al listado

CVE-2024-26275

Estado: AnalizadaAlta (7.3)—

A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Siemens — Jt2goSiemens — ParasolidSiemens — Teamcenter Visualization

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-26275",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-26275",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-09T15:24:40.222186Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "productcert@siemens.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "productcert@siemens.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 7.3,
          "Automatable": "NOT_DEFINED",
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "PASSIVE",
          "attackComplexity": "HIGH",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "productcert@siemens.com",
      "affectedData": [
        {
          "vendor": "Siemens",
          "product": "JT2Go",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2312.0004",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Parasolid V35.1",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V35.1.254",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Parasolid V36.0",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V36.0.207",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Parasolid V36.1",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V36.1.147",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Teamcenter Visualization V14.2",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V14.2.0.12",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Teamcenter Visualization V14.3",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V14.3.0.9",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Teamcenter Visualization V2312",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2312.0004",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*"
          ],
          "vendor": "siemens",
          "product": "jt2go",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2312.0004",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*"
          ],
          "vendor": "siemens",
          "product": "parasolid",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "35.1.254",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0",
              "lessThan": "36.0.207",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0",
              "lessThan": "36.1.147",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:siemens:teamcenter_visualization:14.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:siemens:teamcenter_visualization:14.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:siemens:teamcenter_visualization:2312:*:*:*:*:*:*:*"
          ],
          "vendor": "siemens",
          "product": "teamcenter_visualization",
          "versions": [
            {
              "status": "affected",
              "version": "14.2",
              "lessThan": "*",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "14.3",
              "lessThan": "14.3.0.9",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2312",
              "lessThan": "2312.0004",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-04-09T09:15:24.260",
  "references": [
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-222019.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "productcert@siemens.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-771940.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "productcert@siemens.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-222019.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-771940.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "productcert@siemens.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones &lt; V2312.0004), Parasolid V35.1 (Todas las versiones &lt; V35.1.254), Parasolid V36.0 (Todas las versiones &lt; V36.0.207), Parasolid V36.1 (Todas las versiones &lt; V36.1.147), Teamcenter Visualization V14.2 (todas las versiones), Teamcenter Visualization V14.3 (todas las versiones &lt; V14.3.0.9), Teamcenter Visualization V2312 (todas las versiones &lt; V2312.0004). Las aplicaciones afectadas contienen una lectura fuera de los límites más allá del final de una estructura asignada mientras analizan archivos X_T especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
    }
  ],
  "lastModified": "2026-06-17T07:17:31.223",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30AC2F72-F744-4932-801A-76F82D4511B3",
              "versionEndExcluding": "2312.0004",
              "versionStartIncluding": "2312.0"
            },
            {
              "criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C5B8DD7-F87C-4EAD-AF0E-6125A5017988",
              "versionEndExcluding": "35.1.254",
              "versionStartIncluding": "35.1"
            },
            {
              "criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53F83A10-6FA3-477E-BE18-34AA39FB996D",
              "versionEndExcluding": "36.0.207",
              "versionStartIncluding": "36.0"
            },
            {
              "criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1E2DE94-EC81-4DDF-A545-31B1AAB3FC03",
              "versionEndExcluding": "36.1.147",
              "versionStartIncluding": "36.1"
            },
            {
              "criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0973D930-AC79-48B1-A4A6-25F7734B5822",
              "versionEndExcluding": "14.2.0.12",
              "versionStartIncluding": "14.2"
            },
            {
              "criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47FA9CED-27B4-4AF6-83B4-054E1FABC888",
              "versionEndExcluding": "14.3.0.9",
              "versionStartIncluding": "14.3"
            },
            {
              "criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "064B1ABE-247D-410F-A4E7-C428753DF69F",
              "versionEndExcluding": "2312.0004",
              "versionStartIncluding": "2312.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "productcert@siemens.com"
}