Details of VAR-202112-0796

ID

VAR-202112-0796

CVE

CVE-2021-44013

TITLE

Siemens JT2Go JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Trust: 0.7

sources: ZDI: ZDI-22-009

DESCRIPTION

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15103). This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of JT files

Trust: 1.62

sources: NVD: CVE-2021-44013 // ZDI: ZDI-22-009 // VULMON: CVE-2021-44013

AFFECTED PRODUCTS

vendor:	siemens	model:	jt2go	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	teamcenter visualization	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	jt2go	scope:	-	version:	-	Trust: 0.7

sources: ZDI: ZDI-22-009 // NVD: CVE-2021-44013

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2021-44013
value:	HIGH
Trust: 1.0
ZDI:	CVE-2021-44013
value:	HIGH
Trust: 0.7
CNNVD:	CNNVD-202112-1204
value:	HIGH
Trust: 0.6
VULMON:	CVE-2021-44013
value:	MEDIUM
Trust: 0.1

NVD:
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	TRUE
version:	2.0
Trust: 1.0
VULMON:	CVE-2021-44013
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

NVD:
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
ZDI:	CVE-2021-44013
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-22-009 // VULMON: CVE-2021-44013 // NVD: CVE-2021-44013 // CNNVD: CNNVD-202112-1204

PROBLEMTYPE DATA

problemtype:

CWE-787

Trust: 1.0

sources: NVD: CVE-2021-44013

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202112-1204

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202112-1204

CONFIGURATIONS

sources: NVD: CVE-2021-44013

PATCH

title:	-	url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
title:	Siemens Jt2go Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=174919	Trust: 0.6
title:	Siemens Security Advisories: Siemens Security Advisory	url:	https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories&qid=39139dcd04f2a523ea449623583b65af	Trust: 0.1

sources: ZDI: ZDI-22-009 // VULMON: CVE-2021-44013 // CNNVD: CNNVD-202112-1204

EXTERNAL IDS

db:	NVD	id:	CVE-2021-44013	Trust: 2.4
db:	ZDI	id:	ZDI-22-009	Trust: 2.4
db:	SIEMENS	id:	SSA-595101	Trust: 1.7
db:	ZDI_CAN	id:	ZDI-CAN-15103	Trust: 0.7
db:	CS-HELP	id:	SB2022010614	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.4300	Trust: 0.6
db:	ICS CERT	id:	ICSA-21-350-10	Trust: 0.6
db:	CNNVD	id:	CNNVD-202112-1204	Trust: 0.6
db:	VULMON	id:	CVE-2021-44013	Trust: 0.1

sources: ZDI: ZDI-22-009 // VULMON: CVE-2021-44013 // NVD: CVE-2021-44013 // CNNVD: CNNVD-202112-1204

REFERENCES

url:	https://www.zerodayinitiative.com/advisories/zdi-22-009/	Trust: 2.4
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf	Trust: 1.7
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
url:	https://us-cert.cisa.gov/ics/advisories/icsa-21-350-10	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.4300	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022010614	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/787.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: ZDI: ZDI-22-009 // VULMON: CVE-2021-44013 // NVD: CVE-2021-44013 // CNNVD: CNNVD-202112-1204

CREDITS

Mat Powell of Trend Micro Zero Day Initiative

Trust: 1.3

sources: ZDI: ZDI-22-009 // CNNVD: CNNVD-202112-1204

SOURCES

db:	ZDI	id:	ZDI-22-009
db:	VULMON	id:	CVE-2021-44013
db:	NVD	id:	CVE-2021-44013
db:	CNNVD	id:	CNNVD-202112-1204

LAST UPDATE DATE

2023-12-18T11:24:10.994000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-22-009	date:	2022-01-09T00:00:00
db:	VULMON	id:	CVE-2021-44013	date:	2022-01-06T00:00:00
db:	NVD	id:	CVE-2021-44013	date:	2022-03-30T13:15:06.467
db:	CNNVD	id:	CNNVD-202112-1204	date:	2022-01-07T00:00:00

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-22-009	date:	2022-01-06T00:00:00
db:	VULMON	id:	CVE-2021-44013	date:	2021-12-14T00:00:00
db:	NVD	id:	CVE-2021-44013	date:	2021-12-14T12:15:10.720
db:	CNNVD	id:	CNNVD-202112-1204	date:	2021-12-14T00:00:00