CVE-2024-32637 - CVE House

Back to Database

Status published Medium CVE-2024-32637

A vulnerability has been identified in JT2Go (All versions <...

4.8 CVSS

Vulnerability Description

A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.10), Teamcenter Visualization V2312 (All versions < V2312.0005). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted X_T files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-32637

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Siemens

View All →

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All...

A vulnerability has been identified in RUGGEDCOM i800 (All versions),...

A vulnerability has been identified in RUGGEDCOM i800 (All versions),...

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All...

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All...

Affected Vendor

Siemens

View all reports →

Affected Software

JT2Go, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312

Vulnerable Versions:

0

Timeline

Official Publish: May 14th, 2024

Last Modified: August 13th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1499.004 Application or System Exploitation

T1489 Service Stop

T1203 Exploitation for Client Execution

T1190 Exploit Public-Facing Application