Details of VAR-202112-0808

ID

VAR-202112-0808

CVE

CVE-2021-44001

TITLE

Siemens JT2Go PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Trust: 0.7

sources: ZDI: ZDI-22-004

DESCRIPTION

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14974). This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of PDF files

Trust: 1.62

sources: NVD: CVE-2021-44001 // ZDI: ZDI-22-004 // VULMON: CVE-2021-44001

AFFECTED PRODUCTS

vendor:	siemens	model:	jt2go	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	teamcenter visualization	scope:	lt	version:	13.2.0.5	Trust: 1.0
vendor:	siemens	model:	jt2go	scope:	-	version:	-	Trust: 0.7

sources: ZDI: ZDI-22-004 // NVD: CVE-2021-44001

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2021-44001
value:	HIGH
Trust: 1.0
ZDI:	CVE-2021-44001
value:	HIGH
Trust: 0.7
CNNVD:	CNNVD-202112-1192
value:	HIGH
Trust: 0.6
VULMON:	CVE-2021-44001
value:	MEDIUM
Trust: 0.1

NVD:
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	TRUE
version:	2.0
Trust: 1.0
VULMON:	CVE-2021-44001
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

NVD:
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
ZDI:	CVE-2021-44001
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-22-004 // VULMON: CVE-2021-44001 // NVD: CVE-2021-44001 // CNNVD: CNNVD-202112-1192

PROBLEMTYPE DATA

problemtype:

CWE-787

Trust: 1.0

sources: NVD: CVE-2021-44001

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202112-1192

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202112-1192

CONFIGURATIONS

sources: NVD: CVE-2021-44001

PATCH

title:	-	url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
title:	Siemens Jt2go and Siemens Teamcenter Visualization Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=175051	Trust: 0.6
title:	Siemens Security Advisories: Siemens Security Advisory	url:	https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories&qid=39139dcd04f2a523ea449623583b65af	Trust: 0.1
title:	-	url:	https://github.com/0xcybery/cve-t4pdf	Trust: 0.1

sources: ZDI: ZDI-22-004 // VULMON: CVE-2021-44001 // CNNVD: CNNVD-202112-1192

EXTERNAL IDS

db:	NVD	id:	CVE-2021-44001	Trust: 2.4
db:	ZDI	id:	ZDI-22-004	Trust: 2.4
db:	SIEMENS	id:	SSA-595101	Trust: 1.7
db:	ZDI_CAN	id:	ZDI-CAN-14974	Trust: 0.7
db:	ICS CERT	id:	ICSA-21-350-10	Trust: 0.7
db:	CS-HELP	id:	SB2022010614	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.4300	Trust: 0.6
db:	CNNVD	id:	CNNVD-202112-1192	Trust: 0.6
db:	VULMON	id:	CVE-2021-44001	Trust: 0.1

sources: ZDI: ZDI-22-004 // VULMON: CVE-2021-44001 // NVD: CVE-2021-44001 // CNNVD: CNNVD-202112-1192

REFERENCES

url:	https://www.zerodayinitiative.com/advisories/zdi-22-004/	Trust: 2.4
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf	Trust: 1.7
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.7
url:	https://us-cert.cisa.gov/ics/advisories/icsa-21-350-10	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.4300	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022010614	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2021-44001	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/787.html	Trust: 0.2
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.cisa.gov/uscert/ics/advisories/icsa-21-350-10	Trust: 0.1

sources: ZDI: ZDI-22-004 // VULMON: CVE-2021-44001 // NVD: CVE-2021-44001 // CNNVD: CNNVD-202112-1192

CREDITS

Anonymous

Trust: 1.3

sources: ZDI: ZDI-22-004 // CNNVD: CNNVD-202112-1192

SOURCES

db:	ZDI	id:	ZDI-22-004
db:	VULMON	id:	CVE-2021-44001
db:	NVD	id:	CVE-2021-44001
db:	CNNVD	id:	CNNVD-202112-1192

LAST UPDATE DATE

2023-12-18T11:37:21.530000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-22-004	date:	2022-01-09T00:00:00
db:	VULMON	id:	CVE-2021-44001	date:	2022-03-30T00:00:00
db:	NVD	id:	CVE-2021-44001	date:	2022-03-30T13:20:02.493
db:	CNNVD	id:	CNNVD-202112-1192	date:	2022-01-07T00:00:00

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-22-004	date:	2022-01-06T00:00:00
db:	VULMON	id:	CVE-2021-44001	date:	2021-12-14T00:00:00
db:	NVD	id:	CVE-2021-44001	date:	2021-12-14T12:15:10.090
db:	CNNVD	id:	CNNVD-202112-1192	date:	2021-12-14T00:00:00