CVE-2022-47936: A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.

Routine

HIGH 7.8UPGRADEUPGRADEUPGRADE

CVE-2022-47936 is a high-severity flaw (CVSS 7.8) affecting jt open toolkit, jt utilities, parasolid. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the

Why this priority

High severity

A fixed release or distro patch exists.

Risk facts

CVSS score	7.8 (High)
Attack vector	Local
Attack complexity	Low
Privileges needed	None
User interaction	Required
EPSS exploit chance	0.2% (top 87%)
CISA exploited list	No
Weakness	CWE-121
Published	2023-02-14
Last modified	2026-10-23

Publisher (CNA): Siemens AG · Vendor: siemens

Last updated 2026-10-23 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2023-02-14 11:15 UTCPublished CVE record published
2026-10-23 23:10 UTCUpdated Record last modified

siemens jt open toolkit UPGRADE

Affected: < 11.2.3.0

Fixed in: 11.2.3.0

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy jt-open-toolkit || rpm -q jt-open-toolkit || jt-open-toolkit --version

2. UPGRADE to 11.2.3.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade jt-open-toolkit

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade jt-open-toolkit

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

siemens jt utilities UPGRADE

Affected: < 11.2.3.0

Fixed in: 11.2.3.0

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy jt-utilities || rpm -q jt-utilities || jt-utilities --version

2. UPGRADE to 11.2.3.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade jt-utilities

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade jt-utilities

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

siemens parasolid UPGRADE

Affected: >= 34.0 and < 34.0.252 · >= 34.1 and < 34.1.242 · >= 35.0 and < 35.0.170 · >= 35.1 and < 35.1.150

Fixed in: 34.0.252, 34.1.242, 35.0.170, 35.1.150

Safe to downgrade to: a release before 34.0

1. Check installed version

apt-cache policy parasolid || rpm -q parasolid || parasolid --version

2. UPGRADE to 34.0.252 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade parasolid

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade parasolid

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 34.0 (Debian / Ubuntu)

apt-cache madison parasolid sudo apt install parasolid=<VERSION_BEFORE_34.0> sudo apt-mark hold parasolid

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list parasolid sudo dnf downgrade parasolid-<VERSION_BEFORE_34.0> sudo dnf versionlock add parasolid

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2022-47936?

jt open toolkit: upgrade to 11.2.3.0; jt utilities: upgrade to 11.2.3.0; parasolid: upgrade to 34.0.252, 34.1.242, 35.0.170, 35.1.150. Exact commands for each OS are on this page.

Is CVE-2022-47936 being exploited?

CVE-2022-47936 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2022-47936 affect?

CVE-2022-47936 affects jt open toolkit, jt utilities, parasolid. Severity is high (CVSS 7.8). A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.

How urgent is CVE-2022-47936?

Priority 30/100. High severity

Related CVEs

CVE-2022-47977 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.
CVE-2023-29053 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.

References

← Back to latest CVEs