Details of VAR-202112-0476

ID

VAR-202112-0476

CVE

CVE-2021-44017

TITLE

Siemens JT2Go TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Trust: 0.7

sources: ZDI: ZDI-22-011

DESCRIPTION

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Image.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted TIF files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15111). This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of TIF files

Trust: 1.62

sources: NVD: CVE-2021-44017 // ZDI: ZDI-22-011 // VULMON: CVE-2021-44017

AFFECTED PRODUCTS

vendor:	siemens	model:	jt2go	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	teamcenter visualization	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	jt2go	scope:	-	version:	-	Trust: 0.7

sources: ZDI: ZDI-22-011 // NVD: CVE-2021-44017

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2021-44017
value:	MEDIUM
Trust: 1.0
ZDI:	CVE-2021-44017
value:	LOW
Trust: 0.7
CNNVD:	CNNVD-202112-1208
value:	MEDIUM
Trust: 0.6
VULMON:	CVE-2021-44017
value:	MEDIUM
Trust: 0.1

NVD:
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	TRUE
version:	2.0
Trust: 1.0
VULMON:	CVE-2021-44017
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

NVD:
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0
ZDI:	CVE-2021-44017
baseSeverity:	LOW
baseScore:	3.3
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	1.4
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-22-011 // VULMON: CVE-2021-44017 // NVD: CVE-2021-44017 // CNNVD: CNNVD-202112-1208

PROBLEMTYPE DATA

problemtype:

CWE-125

Trust: 1.0

sources: NVD: CVE-2021-44017

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202112-1208

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202112-1208

CONFIGURATIONS

sources: NVD: CVE-2021-44017

PATCH

title:	-	url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
title:	Siemens Jt2go Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=174922	Trust: 0.6
title:	Siemens Security Advisories: Siemens Security Advisory	url:	https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories&qid=39139dcd04f2a523ea449623583b65af	Trust: 0.1

sources: ZDI: ZDI-22-011 // VULMON: CVE-2021-44017 // CNNVD: CNNVD-202112-1208

EXTERNAL IDS

db:	NVD	id:	CVE-2021-44017	Trust: 2.4
db:	ZDI	id:	ZDI-22-011	Trust: 2.4
db:	SIEMENS	id:	SSA-595101	Trust: 1.7
db:	ZDI_CAN	id:	ZDI-CAN-15111	Trust: 0.7
db:	CS-HELP	id:	SB2022010614	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.4300	Trust: 0.6
db:	ICS CERT	id:	ICSA-21-350-10	Trust: 0.6
db:	CNNVD	id:	CNNVD-202112-1208	Trust: 0.6
db:	VULMON	id:	CVE-2021-44017	Trust: 0.1

sources: ZDI: ZDI-22-011 // VULMON: CVE-2021-44017 // NVD: CVE-2021-44017 // CNNVD: CNNVD-202112-1208

REFERENCES

url:	https://www.zerodayinitiative.com/advisories/zdi-22-011/	Trust: 2.4
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf	Trust: 1.7
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
url:	https://us-cert.cisa.gov/ics/advisories/icsa-21-350-10	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.4300	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022010614	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/125.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: ZDI: ZDI-22-011 // VULMON: CVE-2021-44017 // NVD: CVE-2021-44017 // CNNVD: CNNVD-202112-1208

CREDITS

Mat Powell of Trend Micro Zero Day Initiative

Trust: 1.3

sources: ZDI: ZDI-22-011 // CNNVD: CNNVD-202112-1208

SOURCES

db:	ZDI	id:	ZDI-22-011
db:	VULMON	id:	CVE-2021-44017
db:	NVD	id:	CVE-2021-44017
db:	CNNVD	id:	CNNVD-202112-1208

LAST UPDATE DATE

2023-12-18T11:35:39.411000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-22-011	date:	2022-01-09T00:00:00
db:	VULMON	id:	CVE-2021-44017	date:	2022-01-06T00:00:00
db:	NVD	id:	CVE-2021-44017	date:	2022-03-30T13:02:54.673
db:	CNNVD	id:	CNNVD-202112-1208	date:	2022-01-07T00:00:00

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-22-011	date:	2022-01-06T00:00:00
db:	VULMON	id:	CVE-2021-44017	date:	2021-12-14T00:00:00
db:	NVD	id:	CVE-2021-44017	date:	2021-12-14T12:15:10.870
db:	CNNVD	id:	CNNVD-202112-1208	date:	2021-12-14T00:00:00