Vulnerability identifier: #VU63119

Vulnerability risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-29029

CWE-ID: CWE-476

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Teamcenter Visualization
Other software / Other software solutions
JT2Go
Server applications / Virtualization software

Vendor: Siemens

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the CGM_NIST_Loader.dll. A remote attacker can use a specially crafted CGM file and perform a denial of service (DoS) attack.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Teamcenter Visualization: 13.3 - 14.0

---

CPE

• cpe:2.3:a:siemens:teamcenter_visualization:13.3:*:*:*:*:*:*:*

External links
http://cert-portal.siemens.com/productcert/txt/ssa-553086.txt

---

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?