CVE-2021-34324: 
Siemens JT2Go vulnerability analysis and mitigation

CVE-2021-34324 is a Use-After-Free vulnerability affecting Siemens JT2Go software. The vulnerability was discovered in the Jt981.dll library when parsing JT files, where the application lacks proper validation of user-supplied data prior to performing further free operations on an object. The issue was disclosed on July 19, 2021, affecting all versions of JT2Go prior to v13.2 (ZDI Advisory, CISA Advisory).

The vulnerability is classified as CWE-416 (Use After Free) with a CVSS v3 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The specific flaw exists within the parsing of JT files in the Jt981.dll library, where the application fails to validate the existence of an object prior to performing operations on it (ZDI Advisory).

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the context of the current process. The attack requires user interaction, as the target must visit a malicious page or open a malicious file (CISA Advisory).

The vulnerability requires local access and user interaction to exploit. There are no known public exploits specifically targeting this vulnerability, and it is not exploitable remotely (CISA Advisory).

Siemens has released version 13.2 of JT2Go to address this vulnerability. Users are recommended to update to this version. As a general security measure, Siemens strongly recommends protecting network access with appropriate mechanisms and following their Operational Guidelines for Industrial Security (CISA Advisory).