A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15053)
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
JT2Go
Vendor
Siemens
Product
JT2Go
Platforms
Unknown
Default status
Unknown
JT2Go · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V13.2.0.7
affected
Unavailable
Unavailable
Unavailable
None listed
Solid Edge SE2021
Vendor
Siemens
Product
Solid Edge SE2021
Platforms
Unknown
Default status
Unknown
Solid Edge SE2021 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < SE2021MP9
affected
Unavailable
Unavailable
Unavailable
None listed
Solid Edge SE2022
Vendor
Siemens
Product
Solid Edge SE2022
Platforms
Unknown
Default status
Unknown
Solid Edge SE2022 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < SE2022MP1
affected
Unavailable
Unavailable
Unavailable
None listed
Teamcenter Visualization V13.1
Vendor
Siemens
Product
Teamcenter Visualization V13.1
Platforms
Unknown
Default status
Unknown
Teamcenter Visualization V13.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V13.1.0.9
affected
Unavailable
Unavailable
Unavailable
None listed
Teamcenter Visualization V13.2
Vendor
Siemens
Product
Teamcenter Visualization V13.2
Platforms
Unknown
Default status
Unknown
Teamcenter Visualization V13.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V13.2.0.7
affected
Unavailable
Unavailable
Unavailable
None listed
Teamcenter Visualization V13.3
Vendor
Siemens
Product
Teamcenter Visualization V13.3
Platforms
Unknown
Default status
Unknown
Teamcenter Visualization V13.3 · Scoped product and version facts