CVE-2022-45484 LOW

CVE-2022-45484

Vendor Siemens
Product JT2Go
Weakness CWE-125
Published December 13, 2022
Last update April 21, 2025
View on NVD All CVEs

CVSS base score

3.3/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

What the vulnerability does

01Description

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.9), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.5), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CCITT_G4Decode.dll contains an out of bounds read vulnerability when parsing a RAS file. An attacker can leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19056)

Key dates

02Disclosure timeline

December 13, 2022 CVE published
April 21, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-20766 Adobe Indesign 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerabiity CVE-2021-42734 Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-25889 ZDI-CAN-19466: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability CVE-2026-33516 xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers CVE-2024-20712 Adobe Substance 3D Stager v2.1.1 Vulnerability III