Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-2069
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Datalogics APDFL library Heap-based Buffer Overflow
Source: NVD (National Vulnerability Database)
Vulnerability Description
The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
堆缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
Siemens Teamcenter Visualization 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens Teamcenter Visualization是德国西门子(Siemens)公司的一个可为设计2D、3D场景提供团队协作功能的软件。该软件通过从多种机械计算机辅助设计(MCAD)格式创建虚拟原型,可简化了工程和制造流程。 Siemens Teamcenter Visualization V13.3.0.5之前版本、V14.0所有版本,JT2Go V13.3.0.5之前版本存在安全漏洞,该漏洞源于在解析特制PDF文件时APDFL.dll发生边界错误。远程攻击者可以诱骗受害者打开专门制作的P
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
SiemensJT2Go unspecified ~ V13.3.0.5 -
SiemensTeamcenter Visualization V13.3 unspecified ~ V13.3.0.5 -
SiemensTeamcenter Visualization V14.0 unspecified ~ V14.0.0.2 -
II. Public POCs for CVE-2022-2069
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2022-2069
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2022-2069

No comments yet


Leave a comment