CVE-2022-41279 — Vulnetix

CVE-2022-41279 PUBLISHED

In Siemens JT2Go existieren mehrere Schwachstellen in der CGM_NIST_Loader.dll. Diese beruhen auf Nullzeiger-Dereferenzierungen und Fehlern in der Speicherbehandlung während des Parsens von CGM Dateien. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service zu verursachen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.

EPSS 0.05% · 17.0th percentile

Risk Scores

EPSS Score

0.05%

17.0th percentile

Affected Products

Vendor	Product	Versions
Siemens	Siemens JT2Go

Exploit Intelligence

Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)

…and 536 more exploits

Timeline

Oct 2, 2020 PoC Published
Nov 6, 2020 PoC Published
Sep 6, 2021 PoC Published
Dec 12, 2022 CVE Published
Dec 14, 2022 EPSS Score
Jan 25, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 8, 2023 EPSS Score
Apr 18, 2023 EPSS Score
May 30, 2023 EPSS Score
Jul 11, 2023 EPSS Score
Aug 22, 2023 EPSS Score

References

Open in Interactive Console →