Details of VAR-202112-0797

ID

VAR-202112-0797

CVE

CVE-2021-44012

TITLE

Siemens JT2Go JT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Trust: 0.7

sources: ZDI: ZDI-22-008

DESCRIPTION

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15102). This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of JT files

Trust: 1.62

sources: NVD: CVE-2021-44012 // ZDI: ZDI-22-008 // VULMON: CVE-2021-44012

AFFECTED PRODUCTS

vendor:	siemens	model:	jt2go	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	teamcenter visualization	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	jt2go	scope:	-	version:	-	Trust: 0.7

sources: ZDI: ZDI-22-008 // NVD: CVE-2021-44012

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2021-44012
value:	MEDIUM
Trust: 1.0
ZDI:	CVE-2021-44012
value:	LOW
Trust: 0.7
CNNVD:	CNNVD-202112-1203
value:	MEDIUM
Trust: 0.6
VULMON:	CVE-2021-44012
value:	MEDIUM
Trust: 0.1

NVD:
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	TRUE
version:	2.0
Trust: 1.0
VULMON:	CVE-2021-44012
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

NVD:
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0
ZDI:	CVE-2021-44012
baseSeverity:	LOW
baseScore:	3.3
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	1.4
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-22-008 // VULMON: CVE-2021-44012 // NVD: CVE-2021-44012 // CNNVD: CNNVD-202112-1203

PROBLEMTYPE DATA

problemtype:

CWE-125

Trust: 1.0

sources: NVD: CVE-2021-44012

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202112-1203

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202112-1203

CONFIGURATIONS

sources: NVD: CVE-2021-44012

PATCH

title:	-	url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
title:	Siemens Jt2go Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=174918	Trust: 0.6
title:	Siemens Security Advisories: Siemens Security Advisory	url:	https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories&qid=39139dcd04f2a523ea449623583b65af	Trust: 0.1

sources: ZDI: ZDI-22-008 // VULMON: CVE-2021-44012 // CNNVD: CNNVD-202112-1203

EXTERNAL IDS

db:	NVD	id:	CVE-2021-44012	Trust: 2.4
db:	ZDI	id:	ZDI-22-008	Trust: 2.4
db:	SIEMENS	id:	SSA-595101	Trust: 1.7
db:	ZDI_CAN	id:	ZDI-CAN-15102	Trust: 0.7
db:	CS-HELP	id:	SB2022010614	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.4300	Trust: 0.6
db:	ICS CERT	id:	ICSA-21-350-10	Trust: 0.6
db:	CNNVD	id:	CNNVD-202112-1203	Trust: 0.6
db:	VULMON	id:	CVE-2021-44012	Trust: 0.1

sources: ZDI: ZDI-22-008 // VULMON: CVE-2021-44012 // NVD: CVE-2021-44012 // CNNVD: CNNVD-202112-1203

REFERENCES

url:	https://www.zerodayinitiative.com/advisories/zdi-22-008/	Trust: 2.4
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf	Trust: 1.7
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
url:	https://us-cert.cisa.gov/ics/advisories/icsa-21-350-10	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.4300	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022010614	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/125.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: ZDI: ZDI-22-008 // VULMON: CVE-2021-44012 // NVD: CVE-2021-44012 // CNNVD: CNNVD-202112-1203

CREDITS

Mat Powell of Trend Micro Zero Day Initiative

Trust: 1.3

sources: ZDI: ZDI-22-008 // CNNVD: CNNVD-202112-1203

SOURCES

db:	ZDI	id:	ZDI-22-008
db:	VULMON	id:	CVE-2021-44012
db:	NVD	id:	CVE-2021-44012
db:	CNNVD	id:	CNNVD-202112-1203

LAST UPDATE DATE

2023-12-18T10:57:50.195000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-22-008	date:	2022-01-09T00:00:00
db:	VULMON	id:	CVE-2021-44012	date:	2022-01-06T00:00:00
db:	NVD	id:	CVE-2021-44012	date:	2022-03-30T13:16:21.420
db:	CNNVD	id:	CNNVD-202112-1203	date:	2022-01-07T00:00:00

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-22-008	date:	2022-01-06T00:00:00
db:	VULMON	id:	CVE-2021-44012	date:	2021-12-14T00:00:00
db:	NVD	id:	CVE-2021-44012	date:	2021-12-14T12:15:10.667
db:	CNNVD	id:	CNNVD-202112-1203	date:	2021-12-14T00:00:00