Details of VAR-202112-0477

ID

VAR-202112-0477

CVE

CVE-2021-44015

TITLE

Siemens JT2Go CGM File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Trust: 0.7

sources: ZDI: ZDI-22-010

DESCRIPTION

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The VCRUNTIME140.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted CGM files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15109). This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of CGM files

Trust: 1.62

sources: NVD: CVE-2021-44015 // ZDI: ZDI-22-010 // VULMON: CVE-2021-44015

AFFECTED PRODUCTS

vendor:	siemens	model:	jt2go	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	teamcenter visualization	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	jt2go	scope:	-	version:	-	Trust: 0.7

sources: ZDI: ZDI-22-010 // NVD: CVE-2021-44015

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2021-44015
value:	MEDIUM
Trust: 1.0
ZDI:	CVE-2021-44015
value:	LOW
Trust: 0.7
CNNVD:	CNNVD-202112-1206
value:	MEDIUM
Trust: 0.6
VULMON:	CVE-2021-44015
value:	MEDIUM
Trust: 0.1

NVD:
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	TRUE
version:	2.0
Trust: 1.0
VULMON:	CVE-2021-44015
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

NVD:
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0
ZDI:	CVE-2021-44015
baseSeverity:	LOW
baseScore:	3.3
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	1.4
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-22-010 // VULMON: CVE-2021-44015 // CNNVD: CNNVD-202112-1206 // NVD: CVE-2021-44015

PROBLEMTYPE DATA

problemtype:

CWE-125

Trust: 1.0

sources: NVD: CVE-2021-44015

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202112-1206

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202112-1206

CONFIGURATIONS

sources: NVD: CVE-2021-44015

PATCH

title:	-	url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
title:	Siemens Jt2go Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=174921	Trust: 0.6

sources: ZDI: ZDI-22-010 // CNNVD: CNNVD-202112-1206

EXTERNAL IDS

db:	NVD	id:	CVE-2021-44015	Trust: 2.4
db:	ZDI	id:	ZDI-22-010	Trust: 2.4
db:	SIEMENS	id:	SSA-595101	Trust: 1.7
db:	ZDI_CAN	id:	ZDI-CAN-15109	Trust: 0.7
db:	ICS CERT	id:	ICSA-21-350-10	Trust: 0.7
db:	CS-HELP	id:	SB2022010614	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.4300	Trust: 0.6
db:	CNNVD	id:	CNNVD-202112-1206	Trust: 0.6
db:	VULMON	id:	CVE-2021-44015	Trust: 0.1

sources: ZDI: ZDI-22-010 // VULMON: CVE-2021-44015 // CNNVD: CNNVD-202112-1206 // NVD: CVE-2021-44015

REFERENCES

url:	https://www.zerodayinitiative.com/advisories/zdi-22-010/	Trust: 2.4
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf	Trust: 1.7
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
url:	https://us-cert.cisa.gov/ics/advisories/icsa-21-350-10	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.4300	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022010614	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/125.html	Trust: 0.2
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.1

sources: ZDI: ZDI-22-010 // VULMON: CVE-2021-44015 // CNNVD: CNNVD-202112-1206 // NVD: CVE-2021-44015

CREDITS

Mat Powell of Trend Micro Zero Day Initiative

Trust: 1.3

sources: ZDI: ZDI-22-010 // CNNVD: CNNVD-202112-1206

SOURCES

db:	ZDI	id:	ZDI-22-010
db:	VULMON	id:	CVE-2021-44015
db:	CNNVD	id:	CNNVD-202112-1206
db:	NVD	id:	CVE-2021-44015

LAST UPDATE DATE

2024-02-13T00:53:33.673000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-22-010	date:	2022-01-09T00:00:00
db:	VULMON	id:	CVE-2021-44015	date:	2022-03-30T00:00:00
db:	CNNVD	id:	CNNVD-202112-1206	date:	2022-01-07T00:00:00
db:	NVD	id:	CVE-2021-44015	date:	2022-03-30T13:04:54.240

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-22-010	date:	2022-01-06T00:00:00
db:	VULMON	id:	CVE-2021-44015	date:	2021-12-14T00:00:00
db:	CNNVD	id:	CNNVD-202112-1206	date:	2021-12-14T00:00:00
db:	NVD	id:	CVE-2021-44015	date:	2021-12-14T12:15:10.823