Sign-up

ID

VAR-202212-1729


CVE

CVE-2022-3160


TITLE

Siemens Teamcenter Visualization  and  JT2Go  Out-of-bounds write vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2022-005662

DESCRIPTION

The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. Siemens Teamcenter Visualization and JT2Go Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Siemens Teamcenter Visualization and JT2Go

Trust: 1.71

sources: NVD: CVE-2022-3160 // JVNDB: JVNDB-2022-005662 // VULMON: CVE-2022-3160

AFFECTED PRODUCTS

vendor:siemensmodel:teamcenter visualizationscope:ltversion:14.1.0.5

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:ltversion:13.3.0.8

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:gteversion:13.3.0

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:gteversion:14.1

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:gteversion:14.0

Trust: 1.0

vendor:siemensmodel:jt2goscope:ltversion:14.1.0.5

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:ltversion:14.0.0.4

Trust: 1.0

vendor:シーメンスmodel:teamcenter visualizationscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:jt2goscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-005662 // NVD: CVE-2022-3160

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2022-3160
value: HIGH

Trust: 1.0

ics-cert@hq.dhs.gov: CVE-2022-3160
value: HIGH

Trust: 1.0

OTHER: JVNDB-2022-005662
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202301-1065
value: HIGH

Trust: 0.6

NVD:
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 2.0

OTHER: JVNDB-2022-005662
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2022-005662 // NVD: CVE-2022-3160 // NVD: CVE-2022-3160 // CNNVD: CNNVD-202301-1065

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.0

problemtype:Out-of-bounds writing (CWE-787) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-005662 // NVD: CVE-2022-3160

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202301-1065

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202301-1065

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2022-3160

PATCH
title:SSA-360681url:https://cert-portal.siemens.com/productcert/html/ssa-360681.html
Trust: 0.8
title:Siemens Teamcenter Visualization  and  JT2Go Buffer error vulnerability fixurl:http://123.124.177.30/web/xxk/bdxqbyid.tag?id=222346
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2022-005662 // 
            
            
            
            CNNVD: CNNVD-202301-1065

EXTERNAL IDS
db:NVDid:CVE-2022-3160
Trust: 3.3
db:ICS CERTid:ICSA-22-349-15
Trust: 2.5
db:SIEMENSid:SSA-360681
Trust: 1.6
db:JVNid:JVNVU91561630
Trust: 0.8
db:JVNDBid:JVNDB-2022-005662
Trust: 0.8
db:CNNVDid:CNNVD-202301-1065
Trust: 0.6
db:VULMONid:CVE-2022-3160
Trust: 0.1
sources:
            
            
            VULMON: CVE-2022-3160 // 
            
            
            
            JVNDB: JVNDB-2022-005662 // 
            
            
            
            NVD: CVE-2022-3160 // 
            
            
            
            CNNVD: CNNVD-202301-1065

REFERENCES
url:https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-15
Trust: 1.7
url:https://cert-portal.siemens.com/productcert/csaf/ssa-360681.json
Trust: 1.6
url:https://cert-portal.siemens.com/productcert/html/ssa-360681.html
Trust: 1.6
url:https://jvn.jp/vu/jvnvu91561630/index.html
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2022-3160
Trust: 0.8
url:https://www.cisa.gov/news-events/ics-advisories/icsa-22-349-15
Trust: 0.8
url:https://cxsecurity.com/cveshow/cve-2022-3160/
Trust: 0.6
sources:
            
            
            VULMON: CVE-2022-3160 // 
            
            
            
            JVNDB: JVNDB-2022-005662 // 
            
            
            
            NVD: CVE-2022-3160 // 
            
            
            
            CNNVD: CNNVD-202301-1065

SOURCES
db:VULMONid:CVE-2022-3160
db:JVNDBid:JVNDB-2022-005662
db:NVDid:CVE-2022-3160
db:CNNVDid:CNNVD-202301-1065

LAST UPDATE DATE
2023-12-18T11:25:22.240000+00:00

SOURCES UPDATE DATE
db:JVNDBid:JVNDB-2022-005662date:2023-06-08T02:35:00
db:NVDid:CVE-2022-3160date:2023-11-07T03:50:53.193
db:CNNVDid:CNNVD-202301-1065date:2023-01-28T00:00:00

SOURCES RELEASE DATE
db:JVNDBid:JVNDB-2022-005662date:2023-06-08T00:00:00
db:NVDid:CVE-2022-3160date:2023-01-13T01:15:09.687
db:CNNVDid:CNNVD-202301-1065date:2023-01-13T00:00:00