Details of VAR-202112-0798

ID

VAR-202112-0798

CVE

CVE-2021-44011

TITLE

Siemens JT2Go JT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Trust: 0.7

sources: ZDI: ZDI-22-007

DESCRIPTION

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer while parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15101). This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of JT files

Trust: 1.62

sources: NVD: CVE-2021-44011 // ZDI: ZDI-22-007 // VULMON: CVE-2021-44011

AFFECTED PRODUCTS

vendor:	siemens	model:	jt2go	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	teamcenter visualization	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	jt2go	scope:	-	version:	-	Trust: 0.7

sources: ZDI: ZDI-22-007 // NVD: CVE-2021-44011

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2021-44011
value:	MEDIUM
Trust: 1.0
ZDI:	CVE-2021-44011
value:	LOW
Trust: 0.7
CNNVD:	CNNVD-202112-1202
value:	MEDIUM
Trust: 0.6
VULMON:	CVE-2021-44011
value:	MEDIUM
Trust: 0.1

NVD:
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	TRUE
version:	2.0
Trust: 1.0
VULMON:	CVE-2021-44011
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

NVD:
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0
ZDI:	CVE-2021-44011
baseSeverity:	LOW
baseScore:	3.3
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	1.4
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-22-007 // VULMON: CVE-2021-44011 // NVD: CVE-2021-44011 // CNNVD: CNNVD-202112-1202

PROBLEMTYPE DATA

problemtype:

CWE-125

Trust: 1.0

sources: NVD: CVE-2021-44011

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202112-1202

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202112-1202

CONFIGURATIONS

sources: NVD: CVE-2021-44011

PATCH

title:	-	url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
title:	Siemens Jt2go Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=174917	Trust: 0.6
title:	Siemens Security Advisories: Siemens Security Advisory	url:	https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories&qid=39139dcd04f2a523ea449623583b65af	Trust: 0.1

sources: ZDI: ZDI-22-007 // VULMON: CVE-2021-44011 // CNNVD: CNNVD-202112-1202

EXTERNAL IDS

db:	NVD	id:	CVE-2021-44011	Trust: 2.4
db:	ZDI	id:	ZDI-22-007	Trust: 2.4
db:	SIEMENS	id:	SSA-595101	Trust: 1.7
db:	ZDI_CAN	id:	ZDI-CAN-15101	Trust: 0.7
db:	CS-HELP	id:	SB2022010614	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.4300	Trust: 0.6
db:	ICS CERT	id:	ICSA-21-350-10	Trust: 0.6
db:	CNNVD	id:	CNNVD-202112-1202	Trust: 0.6
db:	VULMON	id:	CVE-2021-44011	Trust: 0.1

sources: ZDI: ZDI-22-007 // VULMON: CVE-2021-44011 // NVD: CVE-2021-44011 // CNNVD: CNNVD-202112-1202

REFERENCES

url:	https://www.zerodayinitiative.com/advisories/zdi-22-007/	Trust: 2.4
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf	Trust: 1.7
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
url:	https://us-cert.cisa.gov/ics/advisories/icsa-21-350-10	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.4300	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022010614	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/125.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: ZDI: ZDI-22-007 // VULMON: CVE-2021-44011 // NVD: CVE-2021-44011 // CNNVD: CNNVD-202112-1202

CREDITS

Mat Powell of Trend Micro Zero Day Initiative

Trust: 1.3

sources: ZDI: ZDI-22-007 // CNNVD: CNNVD-202112-1202

SOURCES

db:	ZDI	id:	ZDI-22-007
db:	VULMON	id:	CVE-2021-44011
db:	NVD	id:	CVE-2021-44011
db:	CNNVD	id:	CNNVD-202112-1202

LAST UPDATE DATE

2023-12-18T11:30:54.285000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-22-007	date:	2022-01-09T00:00:00
db:	VULMON	id:	CVE-2021-44011	date:	2022-01-06T00:00:00
db:	NVD	id:	CVE-2021-44011	date:	2022-03-30T13:17:01.853
db:	CNNVD	id:	CNNVD-202112-1202	date:	2022-01-07T00:00:00

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-22-007	date:	2022-01-06T00:00:00
db:	VULMON	id:	CVE-2021-44011	date:	2021-12-14T00:00:00
db:	NVD	id:	CVE-2021-44011	date:	2021-12-14T12:15:10.617
db:	CNNVD	id:	CNNVD-202112-1202	date:	2021-12-14T00:00:00