CVE-2024-26275

A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/html/ssa-222019.html	Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-771940.html	Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-222019.html	Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-771940.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:siemens:jt2go::::::::
	cpe:2.3:a:siemens:parasolid::::::::
	cpe:2.3:a:siemens:parasolid::::::::
	cpe:2.3:a:siemens:parasolid::::::::
	cpe:2.3:a:siemens:teamcenter_visualization::::::::
	cpe:2.3:a:siemens:teamcenter_visualization::::::::
	cpe:2.3:a:siemens:teamcenter_visualization::::::::

History

03 Oct 2025, 20:06

Type	Values Removed	Values Added
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-222019.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-222019.html - Vendor Advisory
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-771940.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-771940.html - Vendor Advisory
CPE		cpe:2.3:a:siemens:parasolid:::::::: cpe:2.3:a:siemens:jt2go:::::::: cpe:2.3:a:siemens:teamcenter_visualization::::::::
First Time		Siemens Siemens jt2go Siemens parasolid Siemens teamcenter Visualization

21 Nov 2024, 09:02

Type	Values Removed	Values Added
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-222019.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-222019.html -
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-771940.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-771940.html -

13 Aug 2024, 08:15

Type	Values Removed	Values Added
Summary		(es) Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones < V2312.0004), Parasolid V35.1 (Todas las versiones < V35.1.254), Parasolid V36.0 (Todas las versiones < V36.0.207), Parasolid V36.1 (Todas las versiones < V36.1.147), Teamcenter Visualization V14.2 (todas las versiones), Teamcenter Visualization V14.3 (todas las versiones < V14.3.0.9), Teamcenter Visualization V2312 (todas las versiones < V2312.0004). Las aplicaciones afectadas contienen una lectura fuera de los límites más allá del final de una estructura asignada mientras analizan archivos X_T especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual.
Summary	(en) A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.	(en) A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

11 Jun 2024, 12:15

Type	Values Removed	Values Added
Summary	(en) A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.	(en) A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
References		() https://cert-portal.siemens.com/productcert/html/ssa-771940.html -

09 Apr 2024, 09:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-04-09 09:15

Updated : 2025-10-03 20:06

NVD link : CVE-2024-26275

Mitre link : CVE-2024-26275

CVE.ORG link : CVE-2024-26275

JSON object : View

Products Affected

siemens

parasolid
jt2go
teamcenter_visualization

CWE

CWE-125

Out-of-bounds Read

7.8 /10