Out-of-bounds Read in Siemens Jt Open Toolkit
CVE-2021-44431
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-14841)
Vulnerability class: Buffer Overflow
EPSS: 0.005 (41.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.
Affected products
- Siemens Jt_open_toolkit
- Siemens Jttk — versions All versions < V11.1.1.0
- Siemens Jt Utilities — versions All versions < V13.1.1.0
- Siemens Jt_utilities
Weakness classification (CWE)
References
- productcert@siemens.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-44431?
- CVE-2021-44431 is a low-severity vulnerability in Siemens Jt Open Toolkit, classified under Out-of-bounds Read. CVSS score: 3.3/10. Published 2021-12-14.
- How severe is CVE-2021-44431?
- Low severity. CVSS v3 base score is 3.3 out of 10.