CVE-2022-41851

State: Published
Severity: 7.8 High
Published: Oct 11, 2022
Updated: May 20, 2025
Reserved: Sep 30, 2022

Description

A vulnerability has been identified in JTTK (All versions < V11.1.1.0), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The JTTK library is vulnerable to an uninitialized pointer reference vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-16973)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-824 Access of Uninitialized Pointer

Affected Products

Product	Versions
JTTKSiemens	All versions < V11.1.1.0Affected
Simcenter Femap V2022.1Siemens	All versions < V2022.1.3Affected
Simcenter Femap V2022.2Siemens	All versions < V2022.2.2Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-611756.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.