CVE-2024-37997

State: Published
Severity: 7.3 High
Published: Jul 9, 2024
Updated: Aug 27, 2025
Reserved: Jun 11, 2024

Description

A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a stack based overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.

Scores

CVSS	Score	Vector	Source
4.0	7.3 High	CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	siemens
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	siemens

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
JT OpenSiemens	before V11.5Affected
JT2GoSiemens	before V2406.0003Affected
PLM XML SDKSiemens	before V7.1.0.014Affected
Teamcenter Visualization V14.2Siemens	before V14.2.0.13Affected
Teamcenter Visualization V14.3Siemens	before V14.3.0.11Affected
Teamcenter Visualization V2312Siemens	before V2312.0008Affected
Teamcenter Visualization V2406Siemens	before V2406.0003Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.