Vulnerabilities > CVE-2022-41278 - NULL Pointer Dereference vulnerability in Siemens Jt2Go and Teamcenter Visualization

047910
CVSS 3.3 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
LOW
local
low complexity
siemens
CWE-476
NVD
Published: 2022-12-13
Updated: 2024-02-01

Summary

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Vulnerable Configurations

Part Description Count
Application
Siemens
21

Common Weakness Enumeration (CWE)

References