Out-of-bounds write in Siemens JT Open
Priority LOW 37CWE-787Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15058, ZDI-CAN-19076, ZDI-CAN-19077)
Why it matters now
EPSS 0.01615 76th percentileScored 2026-11-07
Fix Fixed JT Open (Siemens): V11.1.1.0JT Utilities (Siemens): V13.1.1.0+1 more product
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | JT Open | before V11.1.1.0 | V11.1.1.0 | Patch available | CNA |
| Siemens | JT Utilities | before V13.1.1.0 | V13.1.1.0 | Patch available | CNA |
| Siemens | Solid Edge | before V2023 | V2023 | Patch available | CNA |
- JT Open VendorSiemens Affected before V11.1.1.0 Fixed in V11.1.1.0 Patch available CNA
- JT Utilities VendorSiemens Affected before V13.1.1.0 Fixed in V13.1.1.0 Patch available CNA
- Solid Edge VendorSiemens Affected before V2023 Fixed in V2023 Patch available CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:siemens:jt_open_toolkit:*:*:*:*:*:*:*:* | before 11.1.1.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:jt_utilities:*:*:*:*:*:*:*:* | before 13.1.1.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:* | before 13.2.0.5 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:* | before se2023 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:* | before 13.2.0.5 | Vulnerable | Siemens |
- cpe:2.3:a:siemens:jt_open_toolkit:*:*:*:*:*:*:*:* Versions before 11.1.1.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:jt_utilities:*:*:*:*:*:*:*:* Versions before 13.1.1.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:* Versions before 13.2.0.5 Vulnerable ·Siemens
- cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:* Versions before se2023 Vulnerable ·Siemens
- cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:* Versions before 13.2.0.5 Vulnerable ·Siemens
Remediation
- Fix · CNA JT Open (Siemens) Fixed in V11.1.1.0
- Fix · CNA JT Utilities (Siemens) Fixed in V13.1.1.0
- Fix · CNA Solid Edge (Siemens) Fixed in V2023
Timeline
- 2026-10-02 Threatist record created from CVE-2021-44002
- 2026-10-03 Alias added: GHSA-4586-cfjg-4699
References
More Siemens Jt2go vulnerabilities
- TI-2020-16414 NULL pointer dereference in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16413 Type confusion in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16410 Heap-based buffer overflow in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16408 Heap-based buffer overflow in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16419 Out-of-bounds read in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16418 Out-of-bounds write in Siemens JT2Go CVSS 3.1HIGH 8.8
Sources
- CVE-2021-44002 · CVE Program
- CVE-2021-44002 · NVD
- FIRST EPSS
- GHSA-4586-cfjg-4699 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences