CVE-2024-26277

CVSS V2 None CVSS V3 None

Description

A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted X_T files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Overview

CVE ID
CVE-2024-26277

Assigner
siemens

Vulnerability Status
PUBLISHED

Published Version
2024-04-09T08:34:38.896Z

Last Modified Date
2024-06-11T14:20:28.126Z

Weakness Enumerations

CWE	URL
CWE-476	http://cwe.mitre.org/data/definitions/476.html

References

Reference URL	Reference Tags
https://cert-portal.siemens.com/productcert/html/ssa-222019.html
https://cert-portal.siemens.com/productcert/html/ssa-771940.html

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-26277
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26277

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 00:50:01				Added to TrackCVE