CVE-2024-34085: 
Siemens JT2Go vulnerability analysis and mitigation

A stack overflow vulnerability has been identified in JT2Go (All versions < V2312.0001) and multiple versions of Teamcenter Visualization software, including V14.1, V14.2, V14.3, and V2312. The vulnerability occurs while parsing specially crafted XML files, which could allow an attacker to execute code in the context of the current process. The vulnerability was discovered by Nafiez from Logix Advisor and was assigned CVE-2024-34085 with a CVSS v3.1 base score of 7.8 (Siemens Advisory, CISA Advisory).

The vulnerability is classified as a Stack-based Buffer Overflow (CWE-121) that occurs during the parsing of specially crafted XML files. It has been assigned a CVSS v3.1 base score of 7.8 with the vector string (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Additionally, a CVSS v4.0 score of 7.3 has been calculated with the vector string (CVSS4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N). The vulnerability requires local access and user interaction to be exploited (CISA Advisory, Siemens Advisory).

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the context of the current process, potentially leading to complete compromise of the affected system. The vulnerability affects critical manufacturing sectors worldwide (CISA Advisory).

The vulnerability requires local access and user interaction, specifically opening a maliciously crafted XML file in the affected applications. No known public exploitation specifically targeting this vulnerability has been reported at the time of disclosure (CISA Advisory).

Siemens has released updates to address this vulnerability and recommends updating to the following versions: JT2Go to V2312.0001 or later, Teamcenter Visualization V14.1 to V14.1.0.13 or later, V14.2 to V14.2.0.10 or later, V14.3 to V14.3.0.7 or later, and V2312 to V2312.0001 or later. As a workaround, users are advised not to open untrusted XML files in affected applications. Additionally, Siemens recommends protecting network access to devices with appropriate mechanisms and configuring the environment according to Siemens' operational guidelines for industrial security (Siemens Advisory, CISA Advisory).