CVE-2022-41286 — Vulnetix

CVE-2022-41286 PUBLISHED

In Siemens JT2Go existieren mehrere Schwachstellen in der CGM_NIST_Loader.dll. Diese bestehen aufgrund von Out-of-bounds Read, Out-of-bounds Write und Use After Free Problemen beim Parsen von CGM Dateien. Ein Angreifer kann diese Schwachstellen ausnutzen, um Code im Kontext des aktuellen Prozesses auszuführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.

EPSS 0.06% · 19.7th percentile

Risk Scores

EPSS Score

0.06%

19.7th percentile

Affected Products

Vendor	Product	Versions
Siemens	Siemens JT2Go

Exploit Intelligence

Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)

…and 536 more exploits

Timeline

Oct 2, 2020 PoC Published
Nov 6, 2020 PoC Published
Sep 6, 2021 PoC Published
Dec 12, 2022 CVE Published
Dec 14, 2022 EPSS Score
Dec 16, 2022 EPSS Score
Jan 25, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 8, 2023 EPSS Score
Apr 18, 2023 EPSS Score
May 30, 2023 EPSS Score
Jul 11, 2023 EPSS Score

References

Open in Interactive Console →