CVE-2024-34085

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization V14.2 (All versions < V14.2.0.10), Teamcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization V2312 (All versions < V2312.0001). The affected applications contain a stack overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

Vendor	Product	Versions
Siemens	JT2Go	< V2312.0001
Siemens	Teamcenter Visualization V14.1	< V14.1.0.13
Siemens	Teamcenter Visualization V14.2	< V14.2.0.10
Siemens	Teamcenter Visualization V14.3	< V14.3.0.7
Siemens	Teamcenter Visualization V2312	< V2312.0001
siemens	teamcenter_visualization	>= 14.1, < 14.1.0.13
siemens	teamcenter_visualization	>= 14.2, < 14.2.0.10
siemens	jt2go	< 2312.0001
siemens	teamcenter_visualization	>= 2312, < 2312.0001

References

https://cert-portal.siemens.com/productcert/html/ssa-661579.htmlVendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-661579.htmlVendor Advisory

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-340867.8A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamce CVE-2024-340879.8An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ32 6.0.24.1 allows remote attackers with access to the Web Terminal to achieve r CVE-2024-340887.5In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In case CVE-2024-340895.4An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authentica CVE-2024-340905.4An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. The login banner in CVE-2024-340915.4An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authentica CVE-2024-340928.8An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing sessio CVE-2024-340935.3An issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header Bypass vulnerability. An unauthenticated att CVE-2024-340947.8Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary CVE-2024-340957.8Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary CVE-2024-340967.8Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary CVE-2024-340977.8Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary