{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2022-3161", "ASSIGNER": "ics-cert@hq.dhs.gov", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-119", "cweId": "CWE-119" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Siemens\u00a0", "product": { "product_data": [ { "product_name": "JT2Go", "version": { "version_data": [ { "version_value": "0", "version_affected": "=" } ] } }, { "product_name": "Teamcenter Visualization V13.3", "version": { "version_data": [ { "version_value": "0", "version_affected": "=" } ] } }, { "product_name": "Teamcenter Visualization V14.0", "version": { "version_data": [ { "version_value": "0", "version_affected": "=" } ] } }, { "product_name": "Teamcenter Visualization V14.1", "version": { "version_data": [ { "version_value": "0", "version_affected": "=" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-15", "refsource": "MISC", "name": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-15" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-360681.html", "refsource": "MISC", "name": "https://cert-portal.siemens.com/productcert/html/ssa-360681.html" }, { "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-360681.json", "refsource": "MISC", "name": "https://cert-portal.siemens.com/productcert/csaf/ssa-360681.json" } ] }, "generator": { "engine": "Vulnogram 0.1.0-dev" }, "source": { "discovery": "EXTERNAL" }, "work_around": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\n

Siemens identified the following specific workaround and mitigation user can apply to reduce risk:

\n\n

As a general security measure, Siemens recommends protecting \nnetwork access to devices with appropriate mechanisms. To operate the \ndevices in a protected IT environment, Siemens recommends configuring \nthe environment according to Siemens' operational guidelines for industrial security

and following the recommendations in the product manuals. Siemens also provides additional information on industrial security.
\nFor further inquiries on security vulnerabilities in Siemens products, users should contact Siemens.
\nFor more information, see the associated Siemens security advisory SSA-360681 in HTML and CSAF.\n\n
" } ], "value": "Siemens identified the following specific workaround and mitigation user can apply to reduce risk: \n\n\n\n * Do not open untrusted PDF files in JT2Go and Teamcenter Visualization.\n\n\n\nAs a general security measure, Siemens recommends protecting \nnetwork access to devices with appropriate mechanisms. To operate the \ndevices in a protected IT environment, Siemens recommends configuring \nthe environment according to Siemens' operational guidelines for industrial security https://www.siemens.com/cert/operational-guidelines-industrial-security \n\n and following the recommendations in the product manuals. Siemens also provides additional information on industrial security https://www.siemens.com/industrialsecurity .\n\nFor further inquiries on security vulnerabilities in Siemens products, users should contact Siemens https://www.siemens.com/cert/advisories . \n\nFor more information, see the associated Siemens security advisory SSA-360681 in HTML https://cert-portal.siemens.com/productcert/html/ssa-360681.html and CSAF https://cert-portal.siemens.com/productcert/csaf/ssa-360681.json .\n\n\n" } ], "solution": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\nSiemens released updates for the affected products and recommends updating to the latest versions:
" } ], "value": "Siemens released updates for the affected products and recommends updating to the latest versions:\n * JT2Go: Update to V14.1.0.5 or later version https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html .\u00a0\n\n * Teamcenter Visualization V13.3: Update to V13.3.0.8 or later version https://support.sw.siemens.com/ .\n\n * Teamcenter Visualization V14.0: Update to V14.0.0.4 or later version https://support.sw.siemens.com/ .\n\n * Teamcenter Visualization V14.1: Update to V14.1.0.5 or later version https://support.sw.siemens.com/ .\n\n\n" } ], "credits": [ { "lang": "en", "value": "Michael Heinz and Nafiez reported these vulnerabilities to Siemens.\u00a0" } ], "impact": { "cvss": [ { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" } ] } }