CVE-2022-47936
Full vulnerability record from the local CVENow database.
Description
A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2023-02-14 11:15:14.473000
Last modified
2026-10-23 23:10:00.157000
View original CVE JSON
{
"id": "CVE-2022-47936",
"sourceIdentifier": "[email protected]",
"published": "2023-02-14T11:15:14.473",
"lastModified": "2026-10-23T23:10:00.157",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process."
},
{
"lang": "es",
"value": "Una vulnerabilidad ha sido identificada en JT Open (Todas las versiones anteriores a V11.2.3.0), JT Utilities (Todas las versiones anteriores a V13.2.3.0), Parasolid V34.0 (Todas las versiones anteriores a V34.0.252), Parasolid V34.1 (Todas las versiones anteriores a V34.1.242), Parasolid V35.0 (Todas las versiones anteriores a V35.0.170), Parasolid V35.1 (Todas las versiones anteriores a V35.1.150). La aplicación afectada contiene una vulnerabilidad de desbordamiento de pila al analizar archivos JT especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Siemens",
"product": "JT Open",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V11.2.3.0",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "JT Utilities",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V13.2.3.0",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Parasolid V34.0",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V34.0.252",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Parasolid V34.1",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V34.1.242",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Parasolid V35.0",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V35.0.170",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Parasolid V35.1",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V35.1.150",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-03-20T20:07:21.772715Z",
"id": "CVE-2022-47936",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:jt_open_toolkit:*:*:*:*:*:*:*:*",
"versionEndExcluding": "11.2.3.0",
"matchCriteriaId": "33C7875E-FA42-4163-9395-B5A06E698328"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:jt_utilities:*:*:*:*:*:*:*:*",
"versionEndExcluding": "11.2.3.0",
"matchCriteriaId": "7300A3A0-744A-4D5A-A1CD-D83A1FE97A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
"versionStartIncluding": "34.0",
"versionEndExcluding": "34.0.252",
"matchCriteriaId": "F0D9079D-6138-4602-A982-9BC4ECBC35E7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
"versionStartIncluding": "34.1",
"versionEndExcluding": "34.1.242",
"matchCriteriaId": "4C486991-A1C0-4815-AAD6-163464D711AA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
"versionStartIncluding": "35.0",
"versionEndExcluding": "35.0.170",
"matchCriteriaId": "EA2114FD-BB07-4C24-98B1-928A510565BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
"versionStartIncluding": "35.1",
"versionEndExcluding": "35.1.150",
"matchCriteriaId": "5C98612B-63DF-473C-AF6E-CF3740356D5B"
}
]
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}