Vulnerabilities > CVE-2021-44003 - Use of Uninitialized Resource vulnerability in Siemens Jt2Go and Teamcenter Visualization

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

siemens

CWE-908

NVD

Published: 2021-12-14

Updated: 2022-07-25

Summary

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to use of uninitialized memory while parsing user supplied TIFF files. This could allow an attacker to cause a denial-of-service condition.

Vulnerable Configurations

Part	Description	Count
Application	Siemens Siemens Teamcenter Visualization - Siemens Teamcenter Visualization 8.0.9085 Siemens Teamcenter Visualization 12.4.0 Siemens Teamcenter Visualization 13.0.0 Siemens Teamcenter Visualization 13.1.0 Siemens Teamcenter Visualization 13.1.0.1 Siemens Teamcenter Visualization 13.1.0.2 Siemens Teamcenter Visualization 13.1.0.3 Siemens Teamcenter Visualization 13.2.0 Siemens Teamcenter Visualization 13.2.0.1 Siemens Teamcenter Visualization 13.2.0.2 Siemens Jt2Go - Siemens Jt2Go 13.1.0 Siemens Jt2Go 13.1.0.1 Siemens Jt2Go 13.1.0.2 Siemens Jt2Go 13.1.0.3 Siemens Jt2Go 13.2.0 Siemens Jt2Go 13.2.0.1 Siemens Jt2Go 13.2.0.2	19

Common Weakness Enumeration (CWE)

CWE-908 - Use of Uninitialized Resource

References

https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf