It is also recommended that users avoid opening untrusted files from unknown sources in JT2Go and Teamcenter Visualization. Siemens released updates for the JT2Go, and users were advised to update to v13.2.0.1 or later, and for the Teamcenter Visualization, updating to v13.2.0.1 or later (login required) would mitigate risks. Mat Powell and Brian Gorenc of Trend Micro’s Zero Day Initiative, Kai Wang from Codesafe Team of Legendsec at Qi’anxin Group, and Open Design Alliance reported these vulnerabilities to CISA. The Siemens products affected include all versions of JT2Go prior to v13.2.0.1 and all versions of Teamcenter Visualization prior to v13.2.0.1. The Cybersecurity and Infrastructure Security Agency (CISA) revealed Tuesday the presence of several security vulnerabilities in Siemens equipment deployed across multiple critical infrastructure sectors.ĬISA warned users of Siemens ’ JT2Go and Teamcenter Visualization equipment of the detection of security vulnerabilities that allow ‘use after free,’ ‘out-of-bounds write,’ ‘out-of-bounds read,’ and ‘NULL pointer dereference.’ The exploitation of these flaws could allow an attacker to crash an application or execute arbitrary code.

Siemens license manager