CVE-2022-41661

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-41661", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "dateUpdated": "2025-04-21T13:46:57.615Z", "dateReserved": "2022-09-27T00:00:00.000Z", "datePublished": "2022-11-08T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2023-06-13T08:16:51.110Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process."}], "affected": [{"vendor": "Siemens", "product": "JT2Go", "versions": [{"version": "All versions < V14.1.0.4", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V13.2", "versions": [{"version": "All versions < V13.2.0.12", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V13.3", "versions": [{"version": "All versions < V13.3.0.7", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V14.0", "versions": [{"version": "All versions < V14.0.0.3", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V14.1", "versions": [{"version": "All versions < V14.1.0.4", "status": "affected"}], "defaultStatus": "unknown"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-125", "description": "CWE-125: Out-of-bounds Read", "type": "CWE"}]}], "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:49:43.627Z"}, "title": "CVE Program Container", "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-18T15:22:28.698190Z", "id": "CVE-2022-41661", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-21T13:46:57.615Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:49:43.627Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-41661", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-18T15:22:28.698190Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-18T15:22:30.807Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}}], "affected": [{"vendor": "Siemens", "product": "JT2Go", "versions": [{"status": "affected", "version": "All versions < V14.1.0.4"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V13.2", "versions": [{"status": "affected", "version": "All versions < V13.2.0.12"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V13.3", "versions": [{"status": "affected", "version": "All versions < V13.3.0.7"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V14.0", "versions": [{"status": "affected", "version": "All versions < V14.0.0.3"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Teamcenter Visualization V14.1", "versions": [{"status": "affected", "version": "All versions < V14.1.0.4"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf"}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125: Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2023-06-13T08:16:51.110Z"}}}, "cveMetadata": {"cveId": "CVE-2022-41661", "state": "PUBLISHED", "dateUpdated": "2025-04-21T13:46:57.615Z", "dateReserved": "2022-09-27T00:00:00.000Z", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "datePublished": "2022-11-08T00:00:00.000Z", "assignerShortName": "siemens"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "JT2Go", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V14.1.0.4"}]}, {"defaultStatus": "unknown", "product": "Teamcenter Visualization V13.2", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V13.2.0.12"}]}, {"defaultStatus": "unknown", "product": "Teamcenter Visualization V13.3", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V13.3.0.7"}]}, {"defaultStatus": "unknown", "product": "Teamcenter Visualization V14.0", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V14.0.0.3"}]}, {"defaultStatus": "unknown", "product": "Teamcenter Visualization V14.1", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V14.1.0.4"}]}], "source": "productcert@siemens.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*", "matchCriteriaId": "FD5EAF75-B0F4-4792-9833-085B9D830FCE", "versionEndExcluding": "14.1.0.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*", "matchCriteriaId": "FB99D790-4F55-48F2-902B-8739CAEC78EE", "versionEndExcluding": "13.3.0.7", "versionStartIncluding": "13.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F811DB6-3650-4BCB-A538-AAECF63EA085", "versionEndExcluding": "14.0.0.3", "versionStartIncluding": "14.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*", "matchCriteriaId": "175648D0-81ED-4AC9-AF2D-4C9E93814C36", "versionEndExcluding": "14.1.0.4", "versionStartIncluding": "14.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones &lt; V14.1.0.4), Teamcenter Visualization V13.2 (Todas las versiones &lt; V13.2.0.12), Teamcenter Visualization V13.3 (Todas las versiones &lt; V13.3.0. 7), Teamcenter Visualization V14.0 (todas las versiones &lt; V14.0.0.3), Teamcenter Visualization V14.1 (todas las versiones &lt; V14.1.0.4). Los productos afectados contienen una vulnerabilidad de lectura fuera de l\u00edmites al analizar un archivo CGM. Un atacante puede aprovechar esta vulnerabilidad para ejecutar c\u00f3digo en el contexto del proceso actual."}], "id": "CVE-2022-41661", "lastModified": "2026-06-17T05:03:35.330", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "productcert@siemens.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-41661", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-04-18T15:22:28.698190Z", "version": "2.0.3"}}]}, "published": "2022-11-08T11:15:11.623", "references": [{"source": "productcert@siemens.com", "tags": ["Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "productcert@siemens.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}