deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-1688
Published: 2021-01-12
Description: Windows CSC Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1688; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1688
CVE: CVE-2021-1689
Published: 2021-01-12
Description: Windows Multipoint Management Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1689; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1689
CVE: CVE-2021-1690
Published: 2021-01-12
Description: Windows WalletService Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1690; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1690
CVE: CVE-2021-1691
Published: 2021-01-12
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 7.7 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1691; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1691
CVE: CVE-2021-1692
Published: 2021-01-12
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 7.7 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1692; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1692
CVE: CVE-2021-1693
Published: 2021-01-12
Description: Windows CSC Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1693; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1693
CVE: CVE-2021-1694
Published: 2021-01-12
Description: Windows Update Stack Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1694; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1694
CVE: CVE-2021-1695
Published: 2021-01-12
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1695; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1695
CVE: CVE-2021-1696
Published: 2021-01-12
Description: Windows Graphics Component Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1696; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1696
CVE: CVE-2021-1697
Published: 2021-01-12
Description: Windows InstallService Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1697; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1697
CVE: CVE-2021-1699
Published: 2021-01-12
Description: Windows (modem.sys) Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1699; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1699
CVE: CVE-2021-1700
Published: 2021-01-12
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1700; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1700
CVE: CVE-2021-1701
Published: 2021-01-12
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1701; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1701
CVE: CVE-2021-1702
Published: 2021-01-12
Description: Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1702; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1702
CVE: CVE-2021-1703
Published: 2021-01-12
Description: Windows Event Logging Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1703; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1703
CVE: CVE-2021-1704
Published: 2021-01-12
Description: Windows Hyper-V Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1704; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1704
CVE: CVE-2021-1705
Published: 2021-01-12
Description: Microsoft Edge (HTML-based) Memory Corruption Vulnerability
CVSS Score: 4.2 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1705; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1705
CVE: CVE-2021-1706
Published: 2021-01-12
Description: Windows LUAFV Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1706; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1706
CVE: CVE-2021-1707
Published: 2021-01-12
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1707; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1707
CVE: CVE-2021-1708
Published: 2021-01-12
Description: Windows GDI+ Information Disclosure Vulnerability
CVSS Score: 5.7 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1708; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1708
CVE: CVE-2021-1709
Published: 2021-01-12
Description: Windows Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1709; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1709
CVE: CVE-2021-1710
Published: 2021-01-12
Description: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1710; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1710
CVE: CVE-2021-1711
Published: 2021-01-12
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1711; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1711
CVE: CVE-2021-1712
Published: 2021-01-12
Description: Microsoft SharePoint Elevation of Privilege Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1712; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1712
CVE: CVE-2021-1713
Published: 2021-01-12
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1713; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1713
CVE: CVE-2021-1714
Published: 2021-01-12
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1714; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1714
CVE: CVE-2021-1715
Published: 2021-01-12
Description: Microsoft Word Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1715; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1715
CVE: CVE-2021-1716
Published: 2021-01-12
Description: Microsoft Word Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1716; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1716
CVE: CVE-2021-1717
Published: 2021-01-12
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 4.6 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1717; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1717
CVE: CVE-2021-1718
Published: 2021-01-12
Description: Microsoft SharePoint Server Tampering Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1718; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1718
CVE: CVE-2021-1719
Published: 2021-01-12
Description: Microsoft SharePoint Elevation of Privilege Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1719; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1719
CVE: CVE-2021-1723
Published: 2021-01-12
Description: ASP.NET Core and Visual Studio Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1723; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1723
CVE: CVE-2021-1725
Published: 2021-01-12
Description: Bot Framework SDK Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1725; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1725
CVE: CVE-2021-3134
Published: 2021-01-12
Description: Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878.
CVSS Score: 7.8 (HIGH)
References: http://mubu.com/doc/d[PII_REDACTED]; https://www.cnvd.org.cn/flaw/show/2638444; http://mubu.com/doc/d[PII_REDACTED]
CVE: CVE-2020-15799
Published: 2021-01-12
Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf
CVE: CVE-2020-15800
Published: 2021-01-12
Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf
CVE: CVE-2020-25226
Published: 2021-01-12
Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf
CVE: CVE-2020-26980
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing JT files. A crafted JT file could trigger a type confusion condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11881)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-046/; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26981
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). When opening a specially crafted xml file, the application could disclose arbitrary files to remote attackers. This is because of the passing of specially crafted content to the underlying XML parser without taking proper restrictions such as prohibiting an external dtd. (ZDI-CAN-11890)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-048/; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26982
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing CG4 and CGM files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11898)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-052/; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26983
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing PDF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11900)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-054/; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26984
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of JT files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11972)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-051/; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26985
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of RGB and SGI files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11986, ZDI-CAN-11994)
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-056/; https://www.zerodayinitiative.com/advisories/ZDI-21-058/
CVE: CVE-2020-26986
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of JT files. This could lead to a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12014)
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-057/; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26987
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could lead to a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12016, ZDI-CAN-12017)
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-059/; https://www.zerodayinitiative.com/advisories/ZDI-21-061/
CVE: CVE-2020-26988
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11891)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-049/; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26989
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11892)
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf
CVE: CVE-2020-26990
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing ASM files. A crafted ASM file could trigger a type confusion condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11897)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-055/
CVE: CVE-2020-26991
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing ASM files. This could lead to pointer dereferences of a value obtained from untrusted source. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11899)
CVSS Score: 8.8 (HIGH)
CWE: CWE-822, CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-695540.pdf
CVE: CVE-2020-26992
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer during font string handling. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26993
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer in the font index handling function. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26994
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of PCX files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf
CVE: CVE-2020-26995
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of SGI and RGB files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11992)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-060/; https://www.zerodayinitiative.com/advisories/ZDI-21-241/
CVE: CVE-2020-26996
Published: 2021-01-12
Description: A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of CG4 files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12027)
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-062/; https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf