Sign-up

ID

VAR-202102-0379


CVE

CVE-2020-28394


TITLE

JT2Go  and  Teamcenter Visualization  Out-of-bounds read vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2020-015888

DESCRIPTION

A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of RAS files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12283). JT2Go and Teamcenter Visualization Is vulnerable to an out-of-bounds read. Zero Day Initiative To this vulnerability ZDI-CAN-12283 Was numbered.Information may be obtained. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of RAS files

Trust: 2.25

sources: NVD: CVE-2020-28394 // JVNDB: JVNDB-2020-015888 // ZDI: ZDI-21-236

AFFECTED PRODUCTS

vendor:siemensmodel:teamcenter visualizationscope:ltversion:13.1.0.1

Trust: 1.0

vendor:siemensmodel:jt2goscope:ltversion:13.1.0.1

Trust: 1.0

vendor:シーメンスmodel:jt2goscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:teamcenter visualizationscope:eqversion:v13.1.0.1

Trust: 0.8

vendor:siemensmodel:jt2goscope: - version: -

Trust: 0.7

sources: ZDI: ZDI-21-236 // JVNDB: JVNDB-2020-015888 // NVD: CVE-2020-28394

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2020-28394
value: MEDIUM

Trust: 1.8

ZDI: CVE-2020-28394
value: LOW

Trust: 0.7

CNNVD: CNNVD-202102-863
value: MEDIUM

Trust: 0.6

NVD:
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: FALSE
obtainAllPrivilege: FALSE
obtainUserPrivilege: FALSE
obtainOtherPrivilege: FALSE
userInteractionRequired: FALSE
version: 2.0

Trust: 1.0

NVD: CVE-2020-28394
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

NVD:
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 1.8
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2020-28394
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

ZDI: CVE-2020-28394
baseSeverity: LOW
baseScore: 3.3
vectorString: AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 1.8
impactScore: 1.4
version: 3.0

Trust: 0.7

sources: ZDI: ZDI-21-236 // JVNDB: JVNDB-2020-015888 // NVD: CVE-2020-28394 // CNNVD: CNNVD-202102-863

PROBLEMTYPE DATA

problemtype:CWE-125

Trust: 1.0

problemtype:Out-of-bounds read (CWE-125) [NVD Evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2020-015888 // NVD: CVE-2020-28394

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202102-863

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202102-863

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2020-28394

PATCH
title:SSA-663999url:https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
Trust: 0.8
title:Siemens has issued an update to correct this vulnerability.url:https://us-cert.cisa.gov/ics/advisories/icsa-21-040-06
Trust: 0.7
title:JT2Go Buffer error vulnerability fixurl:http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=141285
Trust: 0.6
sources:
            
            
            ZDI: ZDI-21-236 // 
            
            
            
            JVNDB: JVNDB-2020-015888 // 
            
            
            
            CNNVD: CNNVD-202102-863

EXTERNAL IDS
db:NVDid:CVE-2020-28394
Trust: 3.1
db:ZDIid:ZDI-21-236
Trust: 3.1
db:SIEMENSid:SSA-663999
Trust: 1.6
db:ICS CERTid:ICSA-21-040-06
Trust: 1.4
db:JVNid:JVNVU91083521
Trust: 0.8
db:JVNDBid:JVNDB-2020-015888
Trust: 0.8
db:ZDI_CANid:ZDI-CAN-12283
Trust: 0.7
db:AUSCERTid:ESB-2021.0495
Trust: 0.6
db:CNNVDid:CNNVD-202102-863
Trust: 0.6
sources:
            
            
            ZDI: ZDI-21-236 // 
            
            
            
            JVNDB: JVNDB-2020-015888 // 
            
            
            
            NVD: CVE-2020-28394 // 
            
            
            
            CNNVD: CNNVD-202102-863

REFERENCES
url:https://www.zerodayinitiative.com/advisories/zdi-21-236/
Trust: 2.4
url:https://us-cert.cisa.gov/ics/advisories/icsa-21-040-06
Trust: 2.1
url:https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
Trust: 1.6
url:https://jvn.jp/vu/jvnvu91083521/
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2020-28394
Trust: 0.8
url:https://www.auscert.org.au/bulletins/esb-2021.0495
Trust: 0.6
sources:
            
            
            ZDI: ZDI-21-236 // 
            
            
            
            JVNDB: JVNDB-2020-015888 // 
            
            
            
            NVD: CVE-2020-28394 // 
            
            
            
            CNNVD: CNNVD-202102-863

CREDITS
Francis Provencher {PRL}
Trust: 0.7
sources:
            
            
            ZDI: ZDI-21-236

SOURCES
db:ZDIid:ZDI-21-236
db:JVNDBid:JVNDB-2020-015888
db:NVDid:CVE-2020-28394
db:CNNVDid:CNNVD-202102-863

LAST UPDATE DATE
2023-12-18T11:52:25.651000+00:00

SOURCES UPDATE DATE
db:ZDIid:ZDI-21-236date:2021-02-24T00:00:00
db:JVNDBid:JVNDB-2020-015888date:2021-10-20T09:06:00
db:NVDid:CVE-2020-28394date:2021-03-05T18:24:35.117
db:CNNVDid:CNNVD-202102-863date:2021-03-01T00:00:00

SOURCES RELEASE DATE
db:ZDIid:ZDI-21-236date:2021-02-24T00:00:00
db:JVNDBid:JVNDB-2020-015888date:2021-10-20T00:00:00
db:NVDid:CVE-2020-28394date:2021-02-09T18:15:43.073
db:CNNVDid:CNNVD-202102-863date:2021-02-09T00:00:00