CVE-2022-47936: jt open toolkit before 11.2.3.0 (exclusive); +8 more affected products

Affected technology

jt open toolkit · before 11.2.3.0 (exclusive)
siemens

jt utilities · before 11.2.3.0 (exclusive)
siemens

parasolid · from 34.0 (inclusive), before 34.0.252 (exclusive)
siemens

parasolid · from 34.1 (inclusive), before 34.1.242 (exclusive)
siemens

parasolid · from 35.0 (inclusive), before 35.0.170 (exclusive)
siemens

parasolid · from 35.1 (inclusive), before 35.1.150 (exclusive)
siemens

JT Open · All versions < V11.2.3.0
Siemens

JT Utilities · All versions < V13.2.3.0
Siemens

Parasolid V34.0 · All versions < V34.0.252
Siemens

Parasolid V34.1 · All versions < V34.1.242
Siemens

Parasolid V35.0 · All versions < V35.0.170
Siemens

Parasolid V35.1 · All versions < V35.1.150
Siemens

Description’s affected range: versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · No privileges required · User interaction required

Attack conditions (NVD, CVSS 3.1): Local · No privileges required · User interaction required

What an attacker can do

An attacker could execute code in the context of the current process. Vendor/CNA’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.