Sign-up

ID

VAR-202212-1730


CVE

CVE-2022-3159


TITLE

Siemens Teamcenter Visualization  and  JT2Go  Out-of-bounds write vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2022-005664

DESCRIPTION

The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. Siemens Teamcenter Visualization and JT2Go Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Siemens Teamcenter Visualization and JT2Go

Trust: 1.71

sources: NVD: CVE-2022-3159 // JVNDB: JVNDB-2022-005664 // VULMON: CVE-2022-3159

AFFECTED PRODUCTS

vendor:siemensmodel:teamcenter visualizationscope:ltversion:14.1.0.5

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:ltversion:13.3.0.8

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:gteversion:13.3.0

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:gteversion:14.1

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:gteversion:14.0.0

Trust: 1.0

vendor:siemensmodel:jt2goscope:ltversion:14.1.0.5

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:ltversion:14.0.0.4

Trust: 1.0

vendor:シーメンスmodel:teamcenter visualizationscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:jt2goscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-005664 // NVD: CVE-2022-3159

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2022-3159
value: HIGH

Trust: 1.0

ics-cert@hq.dhs.gov: CVE-2022-3159
value: HIGH

Trust: 1.0

OTHER: JVNDB-2022-005664
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202301-1066
value: HIGH

Trust: 0.6

NVD:
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 2.0

OTHER: JVNDB-2022-005664
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2022-005664 // NVD: CVE-2022-3159 // NVD: CVE-2022-3159 // CNNVD: CNNVD-202301-1066

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.0

problemtype:Out-of-bounds writing (CWE-787) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-005664 // NVD: CVE-2022-3159

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202301-1066

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202301-1066

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2022-3159

PATCH
title:SSA-360681url:https://cert-portal.siemens.com/productcert/html/ssa-360681.html
Trust: 0.8
title:Siemens Teamcenter Visualization  and  JT2Go Buffer error vulnerability fixurl:http://123.124.177.30/web/xxk/bdxqbyid.tag?id=222347
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2022-005664 // 
            
            
            
            CNNVD: CNNVD-202301-1066

EXTERNAL IDS
db:NVDid:CVE-2022-3159
Trust: 3.3
db:ICS CERTid:ICSA-22-349-15
Trust: 2.5
db:SIEMENSid:SSA-360681
Trust: 1.6
db:JVNid:JVNVU91561630
Trust: 0.8
db:JVNDBid:JVNDB-2022-005664
Trust: 0.8
db:CNNVDid:CNNVD-202301-1066
Trust: 0.6
db:VULMONid:CVE-2022-3159
Trust: 0.1
sources:
            
            
            VULMON: CVE-2022-3159 // 
            
            
            
            JVNDB: JVNDB-2022-005664 // 
            
            
            
            NVD: CVE-2022-3159 // 
            
            
            
            CNNVD: CNNVD-202301-1066

REFERENCES
url:https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-15
Trust: 1.7
url:https://cert-portal.siemens.com/productcert/csaf/ssa-360681.json
Trust: 1.6
url:https://cert-portal.siemens.com/productcert/html/ssa-360681.html
Trust: 1.6
url:https://jvn.jp/vu/jvnvu91561630/index.html
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2022-3159
Trust: 0.8
url:https://www.cisa.gov/news-events/ics-advisories/icsa-22-349-15
Trust: 0.8
url:https://cxsecurity.com/cveshow/cve-2022-3159/
Trust: 0.6
sources:
            
            
            VULMON: CVE-2022-3159 // 
            
            
            
            JVNDB: JVNDB-2022-005664 // 
            
            
            
            NVD: CVE-2022-3159 // 
            
            
            
            CNNVD: CNNVD-202301-1066

SOURCES
db:VULMONid:CVE-2022-3159
db:JVNDBid:JVNDB-2022-005664
db:NVDid:CVE-2022-3159
db:CNNVDid:CNNVD-202301-1066

LAST UPDATE DATE
2023-12-18T10:50:23.714000+00:00

SOURCES UPDATE DATE
db:JVNDBid:JVNDB-2022-005664date:2023-06-08T02:42:00
db:NVDid:CVE-2022-3159date:2023-11-07T03:50:52.743
db:CNNVDid:CNNVD-202301-1066date:2023-01-28T00:00:00

SOURCES RELEASE DATE
db:JVNDBid:JVNDB-2022-005664date:2023-06-08T00:00:00
db:NVDid:CVE-2022-3159date:2023-01-13T01:15:09.600
db:CNNVDid:CNNVD-202301-1066date:2023-01-13T00:00:00