CVE-2024-37996

LOW

JT Open, JT2Go, PLM XML SDK, Teamcenter Visualization - RCE

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted XML files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Scores

CVSS v3 3.3
EPSS 0.0007
EPSS Percentile 21.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (7)
Siemens/JT Open < V11.5
Siemens/JT2Go < V2406.0003
Siemens/PLM XML SDK < V7.1.0.014
Siemens/Teamcenter Visualization V14.2 < V14.2.0.13
Siemens/Teamcenter Visualization V14.3 < V14.3.0.11
Siemens/Teamcenter Visualization V2312 < V2312.0008
Siemens/Teamcenter Visualization V2406 < V2406.0003
Published Jul 09, 2024
Tracked Since Feb 18, 2026