{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"cveId": "CVE-2022-47936", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "state": "PUBLISHED", "assignerShortName": "siemens", "dateReserved": "2022-12-23T11:29:16.433Z", "datePublished": "2023-02-14T10:36:21.369Z", "dateUpdated": "2023-02-15T09:24:56.841Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2023-02-15T09:24:56.841Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process."}], "affected": [{"vendor": "Siemens", "product": "JT Open", "versions": [{"version": "All versions < V11.2.3.0", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "JT Utilities", "versions": [{"version": "All versions < V13.2.3.0", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Parasolid V34.0", "versions": [{"version": "All versions < V34.0.252", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Parasolid V34.1", "versions": [{"version": "All versions < V34.1.242", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Parasolid V35.0", "versions": [{"version": "All versions < V35.0.170", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Parasolid V35.1", "versions": [{"version": "All versions < V35.1.150", "status": "affected"}], "defaultStatus": "unknown"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121: Stack-based Buffer Overflow", "type": "CWE"}]}], "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf"}]}}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:siemens:jt_open_toolkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "33C7875E-FA42-4163-9395-B5A06E698328", "versionEndExcluding": "11.2.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:jt_utilities:*:*:*:*:*:*:*:*", "matchCriteriaId": "7300A3A0-744A-4D5A-A1CD-D83A1FE97A0B", "versionEndExcluding": "11.2.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*", "matchCriteriaId": "F0D9079D-6138-4602-A982-9BC4ECBC35E7", "versionEndExcluding": "34.0.252", "versionStartIncluding": "34.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*", "matchCriteriaId": "4C486991-A1C0-4815-AAD6-163464D711AA", "versionEndExcluding": "34.1.242", "versionStartIncluding": "34.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*", "matchCriteriaId": "EA2114FD-BB07-4C24-98B1-928A510565BB", "versionEndExcluding": "35.0.170", "versionStartIncluding": "35.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C98612B-63DF-473C-AF6E-CF3740356D5B", "versionEndExcluding": "35.1.150", "versionStartIncluding": "35.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process."}], "id": "CVE-2022-47936", "lastModified": "2023-02-22T16:12:32.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "productcert@siemens.com", "type": "Secondary"}]}, "published": "2023-02-14T11:15:14.473", "references": [{"source": "productcert@siemens.com", "tags": ["Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "productcert@siemens.com", "type": "Primary"}]}

{}