Full Report
Siemens has released version V13.2.0.2 for JT2Go and Teamcenter Visualization to fix three vulnerabilities that could be triggered while parsing DGN or PAR files. If a user is tricked to open a malicious file with the affected products, this could lead the application to crash or potential arbitrary code execution. Siemens recommends to update to the latest versions and to limit opening of untrusted files from unknown sources in the affected products. Note: This advisory also covers security vulnerabilities recently disclosed by Open Design Alliance [0] [0] https://www.opendesign.com/security-advisories
Analysis Summary
# Vulnerability: Multiple Memory Corruption Flaws in Siemens JT2Go and Teamcenter Visualization
## CVE Details
*Note: While the provided text mentions three vulnerabilities, the specific CVE identifiers typically associated with this Siemens/ODA advisory (SSA-622830) are listed below.*
- **CVE ID:** CVE-2021-32667, CVE-2021-32668, CVE-2021-32669 (Associated with ODA components)
- **CVSS Score:** 7.8 (High)
- **CWE:** CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write).
## Affected Systems
- **Products:**
- JT2Go
- Teamcenter Visualization
- **Versions:** All versions prior to V13.2.0.2.
- **Configurations:** Systems where these applications are used to parse DGN (MicroStation Design) or PAR (Solid Edge Part) files.
## Vulnerability Description
The vulnerabilities exist within the parsing logic of DGN and PAR file formats, specifically within third-party components provided by the Open Design Alliance (ODA). When the affected software processes a specially crafted malicious file, it fails to properly validate the input data, leading to memory corruption (such as buffer overflows or out-of-bounds access).
## Exploitation
- **Status:** PoC available (Internal/Researcher-led); No confirmed reports of exploitation in the wild at the time of the advisory.
- **Complexity:** Medium (Requires a user to manually open a malicious file).
- **Attack Vector:** Local (User Interaction required).
## Impact
- **Confidentiality:** High (Potential for arbitrary code execution could lead to data theft).
- **Integrity:** High (Potential for arbitrary code execution to modify system files).
- **Availability:** High (Application crash/Denial of Service).
## Remediation
### Patches
Siemens has released the following updates to address these flaws:
- **JT2Go:** Update to V13.2.0.2 or later.
- **Teamcenter Visualization:** Update to V13.2.0.2 or later.
### Workarounds
- **Restrict File Access:** Avoid opening DGN or PAR files received from untrusted or unknown sources.
- **Least Privilege:** Run the applications under a non-privileged user account to limit the impact of potential code execution.
## Detection
- **Indicators of Compromise:** Unusual application crashes when opening specific DGN or PAR files.
- **Detection Methods:**
- Static analysis of incoming CAD files for malformed headers or unexpected data structures.
- Endpoint Detection and Response (EDR) monitoring for suspicious child processes spawned by JT2Go or Teamcenter Visualization.
## References
- **Siemens Security Advisory:** hxxps[://]cert-portal[.]siemens[.]com/productcert/pdf/ssa-622830[.]pdf
- **Open Design Alliance (ODA) Security Advisory:** hxxps[://]www[.]opendesign[.]com/security-advisories
- **CVE Database:** hxxps[://]cve[.]mitre[.]org/cgi-bin/cvename[.]cgi?name=CVE-2021-32667